Research
Security News
Quasar RAT Disguised as an npm Package for Detecting Vulnerabilities in Ethereum Smart Contracts
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
Line wrapper around the Walt WebAssembly Compiler. Intended to be used to build and package node modules utilizing WebAssembly/Walt. For browser integration use the webpack-loader.
npm install --save-dev walt-cli
In your package.json
{
"scripts": {
"walt": "walt-cli"
}
}
For one to one transforms point the cli at a single Walt file to get a single wasm result file.
npm run walt -- index.walt -o index.wasm
For walt programs which has imports use the wrap flag -w
. Wrap option will
link and compile all dependencies starting from the entry file. The result is a
self contained JavaScript module which exports a factory function. Use it to
generate the WebAssembly instance of your walt program.
npm run walt -- src/walt/entry.walt -o walt-program.js -w
Once compiled the module can be imported just like any other JS module
const makeProgram = require("./walt-program");
// Factory takes an imports object
makeProgram({
env: {
memory: new WebAssembly.Memory({ initial: 1 })
}
}).then(result => {
result.instance.exports.run();
});
Note on imports:
All walt imports starting with a relative path ./paht-to-something
is treated
as a walt module import. All absolute imports are left to you to provide and are
shared between all modules. Every module will get the same version of the import
object provided.
FAQs
CLI for Walt
The npm package walt-cli receives a total of 0 weekly downloads. As such, walt-cli popularity was classified as not popular.
We found that walt-cli demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
Security News
Research
A supply chain attack on Rspack's npm packages injected cryptomining malware, potentially impacting thousands of developers.
Research
Security News
Socket researchers discovered a malware campaign on npm delivering the Skuld infostealer via typosquatted packages, exposing sensitive data.