
Security News
/Research
Wallet-Draining npm Package Impersonates Nodemailer to Hijack Crypto Transactions
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
github.com/GoSeoTaxi/email-validator
This application provides a gRPC-based email validation service using Golang. It checks the validity of email addresses by verifying their format and checking the associated domain's MX records. Additionally, it includes a Gateway for handling HTTP requests and forwarding them to the gRPC server.
Before you begin, ensure you have the following installed:
The application uses Protocol Buffers to define the service and message types. Run the following command to generate the Go code from the .proto
files:
make generate
You can build the Docker images for both the email validator and the gateway using:
make build
To run the application with Docker Compose, use the following command:
make docker-run
This will start the email validator, gateway, and Redis in separate containers.
To stop and remove the containers, run:
make docker-stop
To run the tests for the application, use:
make test
The gRPC server listens for requests on the configured port. You can use a gRPC client to send requests to validate emails.
The application also exposes an HTTP Gateway. You can send requests to the Gateway, which will forward them to the gRPC server.
Request Body:
{
"email": "example@example.com"
}
Response:
You can set the following environment variables to configure the application:
GRPC_SERVER_ENDPOINT
: The endpoint for the gRPC server (default: email-validator:50051
).HTTP_PORT
: The port for the HTTP server (default: 8080
).REDIS_HOST
: The hostname for the Redis server (default: redis
).REDIS_PORT
: The port for the Redis server (default: 6379
).REDIS_DB
: The Redis database number (default: 0
).REDIS_MAXMEMORY
: The maximum memory limit for Redis (default: 100mb
).DNS_HOSTS
: The DNS servers to use for MX record lookups (default: 1.1.1.1,1.0.0.1
).Contributions are welcome! Please feel free to submit a pull request or open an issue for suggestions and improvements.
This project is licensed under the MIT License. See the LICENSE file for details.
FAQs
Unknown package
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
/Research
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
Security News
This episode explores the hard problem of reachability analysis, from static analysis limits to handling dynamic languages and massive dependency trees.
Security News
/Research
Malicious Nx npm versions stole secrets and wallet info using AI CLI tools; Socket’s AI scanner detected the supply chain attack and flagged the malware.