Research
Security News
Malicious npm Package Targets Solana Developers and Hijacks Funds
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
github.com/bakins/otlptcp
otlptcp
is a receiver for opentelemetry-collector-contrib that receives traces, metrics, and logs
via a tcp listener.
Example:
receivers:
otlptcp:
listen_address: 0.0.0.0:14317
exporters:
otlp:
endpoint: otelcol:4317
service:
pipelines:
traces:
receivers: [otlptcp]
exporters: [otlp]
metrics:
receivers: [otlptcp]
exporters: [otlp]
logs:
receivers: [otlptcp]
exporters: [otlp]
Availible configuration options:
listen_address
- listening address in the form of <ip>:port
. default is 0.0.0.0:14317
max_message_size
- maximum size of a single message. Default to 1m.listen_network
- listent network. Only tcp
is supported.See https://opentelemetry.io/docs/collector/custom-collector/
Each message is prefixed with 5 bytes.
The first byte is an unsigned 8 bit integer that denotes the type of the message. Valid values are:
The next 4 bytes should be an unsigned 32 bit integer in big-endian order.
The message is a protocol buffer encoded request of the appropriate message type.
FAQs
Unknown package
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
Security News
Research
Socket researchers have discovered malicious npm packages targeting crypto developers, stealing credentials and wallet data using spyware delivered through typosquats of popular cryptographic libraries.
Security News
Socket's package search now displays weekly downloads for npm packages, helping developers quickly assess popularity and make more informed decisions.