Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
An optimization tool for lowering your gas costs during Solidity contract instantiation.
There are three main concerns Ethereum developers have when designing smart contracts: security, accuracy, and cost. We sought to tackle the problem of cost by creating a tool that automates the reordering of state variables during contract instantiation in order to lower transaction costs. We ensured efficient memory allocation by reorganizing your state variables to take up the minimal amount of storage slots necessary.
Tetrix is available as the tetrix
package on npm
Tetrix can be used on any single-contract solidity file. You can optimize contract construction cost with it, but you can also view details about your contract such as ABI, bytecode, opcode and assembly.
To install Tetrix, make sure package.json has been initiated in your project folder.
More info on how to initiate package.json go Here
To use latest stable version of Tetrix you can install it via npm:
$ npm install tetrix
To use Tetrix, execute:
$ Tetrix YOUR_SOL_FILE_PATH.sol
In package.json, include a new script in scripts:
"scripts": {
"tetrixGUI": "webpack --config node_modules/tetrix/webpack.config.js && node node_modules/tetrix/server/server.js"
},
then, execute:
$ npm run tetrixGUI
Found a bug? Have a suggestion? Feel free to submit issues!
Esther Kim - https://github.com/choisiesther
Joseph Wu - https://github.com/jospehwu1994
Pauline Chang - https://github.com/pskchang
See also the list of contributors who participated in this project.
This project is licensed under the MIT License
FAQs
- client - server
We found that tetrix demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.