mirror of
https://github.com/XRPLF/xrpl-dev-portal.git
synced 2026-08-23 19:20:54 +00:00
Merge pull request #3099 from XRPLF/blog-quickfixes
Update date field of recent blogs and fix H1 syntax for Clio 2.3.0+ release announcements
This commit is contained in:
@@ -12,7 +12,7 @@ markdown:
|
||||
hide: true
|
||||
---
|
||||
|
||||
## Introducing Clio version 2.3.0
|
||||
# Introducing Clio version 2.3.0
|
||||
|
||||
Version 2.3.0 of Clio, an XRP Ledger API server optimized for HTTP and WebSocket API calls, is now available. This release adds new features and bug fixes.
|
||||
|
||||
|
||||
@@ -11,8 +11,7 @@ markdown:
|
||||
editPage:
|
||||
hide: true
|
||||
---
|
||||
|
||||
## Introducing Clio version 2.3.1
|
||||
# Introducing Clio version 2.3.1
|
||||
|
||||
Version 2.3.1 of Clio, an XRP Ledger API server optimized for HTTP and WebSocket API calls, is now available. This release adds bug fixes.
|
||||
|
||||
|
||||
@@ -11,8 +11,7 @@ markdown:
|
||||
editPage:
|
||||
hide: true
|
||||
---
|
||||
|
||||
## Introducing Clio version 2.4.0
|
||||
# Introducing Clio version 2.4.0
|
||||
|
||||
Version 2.4.0 of Clio, an XRP Ledger API server optimized for HTTP and WebSocket API calls, is now available. This release adds bug fixes.
|
||||
|
||||
|
||||
@@ -1,6 +1,7 @@
|
||||
---
|
||||
category: 2025
|
||||
date: 2025-04-18
|
||||
date: "2025-04-18"
|
||||
template: '../../@theme/templates/blogpost'
|
||||
seo:
|
||||
description: What is DeFi used for, and how is it reshaping industries? Explore the key DeFi use cases that are driving the future of finance.
|
||||
labels:
|
||||
|
||||
@@ -1,6 +1,7 @@
|
||||
---
|
||||
category: 2025
|
||||
date: 2025-04-28
|
||||
date: "2025-04-28"
|
||||
template: '../../@theme/templates/blogpost'
|
||||
seo:
|
||||
title: Malicious Supply Chain Compromise in xrpl.js npm Package
|
||||
description: This disclosure report contains technical details of vulnerability of the XRP Ledger Javascript library package hosted at npmjs.com.
|
||||
@@ -27,7 +28,7 @@ This attack was discovered and reported in the early morning hours of April 22nd
|
||||
|
||||
## Impact
|
||||
|
||||
This vulnerability does **not** affect the XRP Ledger network or codebase, but is instead limited to the npm package called `xrpl`, which is the package name for the **xrpl.js** (a JavaScript library for interacting with the XRP Ledger).
|
||||
This vulnerability does **not** affect the XRP Ledger network or codebase, but is instead limited to the npm package called `xrpl`, which is the package name for **xrpl.js** (a JavaScript library for interacting with the XRP Ledger).
|
||||
|
||||
**Note:** No GitHub repositories were compromised at any time as part of this incident. Instead, the attacker was able to publish malicious code directly into the npm registry system using compromised npm credentials. In particular, npm versions `2.14.2` and `4.2.1` - `4.2.4` of xrpl.js were compromised with malicious code designed to exfiltrate private key material.
|
||||
|
||||
|
||||
Reference in New Issue
Block a user