Loading npm security reports…
Utility toolkit for TRON developers — energy management, resource optimization, and transaction helpers
An exported function can replace or modify a TRON account permission using an attacker parameter, then sign and broadcast it. This can hand account control to the supplied party.
The manifest presents an energy-management toolkit, but its exported optimizer accepts an attacker-controlled account permission.
package.jsonView on unpkg · L4The optimizer builds an account-permission update that assigns the supplied attacker value.
index.jsView on unpkg · L17It signs and broadcasts that permission-changing transaction through the caller's TronWeb client.
index.jsView on unpkg · L25The manifest presents an energy-management toolkit, but its exported optimizer accepts an attacker-controlled account permission.
package.jsonView on unpkg · L4The optimizer builds an account-permission update that assigns the supplied attacker value.
index.jsView on unpkg · L17It signs and broadcasts that permission-changing transaction through the caller's TronWeb client.
index.jsView on unpkg · L25