@metamask/[email protected]

[FrederikBolding]

Bumps @metamask/controllers to 32.0.2 to allow for better deduping in the extension.

[socket-security]

Socket Security Report

Dependency issues detected. If you merge this pull request, you will not be alerted to the instances of these issues again.

😵‍💫 Bin script confusion

This package has multiple bin scripts with the same name. This can cause non-deterministic behavior when installing or could be a sign of a supply chain attack.

Package	Bin script	Location
@ethereumjs/[email protected] (added)	rlp	package.json via @metamask/[email protected], @keystonehq/[email protected], @keystonehq/[email protected], @ethereumjs/[email protected]
[email protected] (added)	rlp	package.json
[email protected] (added)	rlp	package.json via @metamask/[email protected], @keystonehq/[email protected], @keystonehq/[email protected]

Socket.dev scan summary

Issue	Status
Did you mean?	✅ no new possible package typos
Install scripts	✅ no new install scripts
Telemetry	✅ no new telemetry
Troll package	✅ no new troll packages
Malware	✅ no new malware
Native code	✅ no new native modules
Bin Script Confusion	⚠️ 3 new bin script confusions detected
Bin script shell injection	✅ no new bin script shell injection

Bot Commands

To ignore an alert, reply with a comment starting with @SocketSecurity ignore followed by a space separated list of package-name@version specifiers. e.g. @SocketSecurity ignore [email protected] [email protected]

• @SocketSecurity ignore @ethereumjs/[email protected]
• @SocketSecurity ignore [email protected]
• @SocketSecurity ignore [email protected]

Powered by socket.dev