
Research
Security News
Lazarus Strikes npm Again with New Wave of Malicious Packages
The Socket Research Team has discovered six new malicious npm packages linked to North Korea’s Lazarus Group, designed to steal credentials and deploy backdoors.
github.com/danmuck/the_cookie_jar
CSE 312 Group Project
A Learning Management System (LMS) designed to have ease-of-use and basic professor/student interactions.
After signing up and logging in you can update your profile picture by right clicking your name in the top right corner and navigating to account settings
Click the cookie in the top left corner to be brought back to the create classroom screen.
Create a new classroom and then click on the name of your newly created classroom and pick either of two options as both are WebSocket driven.
Our app is deployed at the link above ^
After signing up and logging in you can create a classroom followed by clicking on the new classroom name. Start a game by clicking 'Class Game' and then 'Start'. The rounds are timed and this is displayed to the users in real time using websockets.
Implementated as specified in the handout.
Implemented ReCaptcha to verify that users are created by humans and not bots.
main
is production, dev
is close to production)..env
] in root directory with contents:MONGODB_URI=mongodb://database:27017/
DB_NAME=the_cookie_jar
docker compose up --build --force-recreate
and expect:cookie_lms | Checking availability of database:27017
cookie_lms | ...
cookie_lms | Host database:27017 is now available
cookie_lms | ...
cookie_lms | -----------------------------------
cookie_lms | the_cookie_jar server is running...
cookie_lms | -----------------------------------
cookie_lms | ...
http://localhost:8080/
on your webbrowser and interact with the server.Folder | Description |
---|---|
cmd | Applications that make use of pkg libraries. |
docs | Any documentation related to the project. |
pkg | Our libraries used in the project. |
public | Files to send to clients based on requests (i.e. the webpage, CSS, etc.) |
Note: main.go
is the only application not located in cmd
folder, this is because it is the main server application that is expected to interact with clients for production purposes.
FAQs
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
The Socket Research Team has discovered six new malicious npm packages linked to North Korea’s Lazarus Group, designed to steal credentials and deploy backdoors.
Security News
Socket CEO Feross Aboukhadijeh discusses the open web, open source security, and how Socket tackles software supply chain attacks on The Pair Program podcast.
Security News
Opengrep continues building momentum with the alpha release of its Playground tool, demonstrating the project's rapid evolution just two months after its initial launch.