Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Visit our web page for a nice general overview of the project !
pip install --user babbagecoin
python -m babbagecoin master
# then in another terminal:
python -m babbagecoin miner
Install docker
and docker-compose
, python3
(>=3.9) and poetry
.
Run poetry install
then poetry shell
Run the node (master + miner):
make
Stop the node properly:
make stop
--> to stop all containers if you didn't stopped them properly (if you did two Ctrl+C in a row)
Or you can run separately the master or miner:
make (master | miner)
There are also VSCode actions for debugging each one of them (even the tests, run in terminal with make test
)
!! Important
Configure your blockchain by creating a .env
file on the same model as what's in .env.example
.
The wallet will generate a private key for you, save it to private.key.<CURRENT_USER>, and reuse it afterward. A public key is derived from this private key. The hash of the public key is your address, for example e93417c7 (the first 8 characters). The wallet is managing only one private key at the time.
Use the bbc.sh
script (chmod +x
it first):
./bbc.sh tx MARTIAL 10 0.3
--> sending 10BBC with 0.5BBC fees to MARTIAL
make tx
is a shortcut for the above command
./bbc.sh balance
to get your wallet balance
make balance
is a shortcut for the above command
FAQs
Second edition of Project Babbage, create a blockchain from scratch.
We found that babbagecoin demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.