Research
Security News
Malicious npm Package Targets Solana Developers and Hijacks Funds
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
By Socket Research Team - Dec 02, 2024
Huge News!Announcing our $40M Series B led by Abstract Ventures.Learn More →
github.com/NpoolPlatform/cloud-hashing-goods
- Version published
- Created
Npool Cloud Hashing Goods
目录
功能
- 商品信息
- 商品附加信息
- 供应商场地信息
- 目标区域信息
- 设备信息
- 应用内商品定价信息
- 应用内商品授权信息
- 应用内商品区域授权信息
- 应用区域授权信息
- 商品评论
- 商品审核结果
- API友好输出
- Price Currency
- Fee Type
- Good Fee
命令
- make init
初始化仓库，创建go.mod - make verify
验证开发环境与构建环境，检查code conduct - make verify-build
编译目标 - make test
单元测试 - make generate-docker-images
生成docker镜像 - make cloud-hashing-goods
单独编译服务 - make cloud-hashing-goods-image
单独生成服务镜像 - make deploy-to-k8s-cluster
部署到k8s集群
最佳实践
- 每个服务只提供单一可执行文件，有利于docker镜像打包与k8s部署管理
- 每个服务提供http调试接口，通过curl获取调试信息
- 集群内服务间direct call调用通过服务发现获取目标地址进行调用
- 集群内服务间event call调用通过rabbitmq解耦
关于mysql
- 创建app后，从app.Mysql()获取本地mysql client
- 文档参考
GRPC
FAQs
Unknown package
Package last updated on 30 Sep 2022
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Related posts
Security News
Research
Typosquatting Cryptographic Libraries: Malicious npm Packages Threaten Crypto Developers with Keylogging and Wallet Theft
Socket researchers have discovered malicious npm packages targeting crypto developers, stealing credentials and wallet data using spyware delivered through typosquats of popular cryptographic libraries.
By Kirill Boychenko - Nov 27, 2024
Security News
Weekly Downloads Now Available in npm Package Search Results
Socket's package search now displays weekly downloads for npm packages, helping developers quickly assess popularity and make more informed decisions.
By Sarah Gooding - Nov 26, 2024