
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
trac-wallet
Advanced tools
This project provides a `WalletProvider` class that can generate wallets that store ED25519 keys, sign messages, and verify signatures. It also includes functionality to export keys to an encrypted file.
This project provides a WalletProvider class that can generate wallets that store ED25519 keys, sign messages, and verify signatures. It also includes functionality to export keys to an encrypted file.
To install the necessary dependencies, run:
npm install
You can create a new wallet with a randomly generated mnemonic phrase:
import { WalletProvider } from 'trac-wallet';
const provider = new WalletProvider({ addressPrefix: 'trac' });
const wallet = await provider.generate('optional-seed');
console.log(wallet.publicKey.toString('hex')); // Prints the public key
You can also create a wallet with a specific mnemonic phrase:
const mnemonic = 'session attitude weekend sign collect mobile return vacuum pool afraid wagon client';
const wallet = await provider.fromMnemonic({ mnemonic });
console.log(wallet.publicKey.toString('hex')); // Prints the public key
You can sign a message with the wallet's secret key and verify the signature with the public key:
const message = 'Hello, world!';
const signature = wallet.signMessage(message);
const isValid = wallet.verify(message, signature);
console.log(isValid); // Prints true if the signature is valid
You can export the wallet's keys to a JSON file:
const filePath = './wallet.json';
exportToFile(wallet, filePath);
To run the tests, use the following command:
npm run test
FAQs
This project provides a `WalletProvider` class that can generate wallets that store ED25519 keys, sign messages, and verify signatures. It also includes functionality to export keys to an encrypted file.
We found that trac-wallet demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 4 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.