Research
Security News
Malicious npm Package Targets Solana Developers and Hijacks Funds
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
github.com/ddd015/word-cloud-generator
It's a golang web app that takes a block of text and turns it into a word cloud. Star this repo if you like the class!
This project is a a sample app for a class on Continuous Delivery at LinkedIn Learning. You can see the class as well as other classes I have available at https://www.linkedin.com/learning/instructors/james-wickett. Thanks!
export GOPATH="${HOME}/go"
export PATH=$PATH:$(go env GOPATH)/bin
go get github.com/smartystreets/goconvey
We use git hooks to standardize development on the project. Please run make git-hooks
to get started.
This will pull down dependencies, run unit tests, and compile a linux, mac and windows binary into ./artifacts.
make
You can build and install a copy in your local $GOPATH/bin directory with:
make install
make clean
make lint
make test
make goconvey-install
make goconvey
make run
or just run the executable. It will run as a daemon and bind to port 8888, and you can see it by going to http://localhost:8888 in your browser.
$ curl -H "Content-Type: application/json" -d '{"text":"ths is a really really really important thing this is"}' http://localhost:8888/api
Use this setup
aws_access_key_id = AKIAIOSFODNN7EXAMPLE aws_secret_access_key = wJalrXUtnFEMI/K7MDENG/bPxRfiCYEXAMPLEKEY
FAQs
Unknown package
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
Security News
Research
Socket researchers have discovered malicious npm packages targeting crypto developers, stealing credentials and wallet data using spyware delivered through typosquats of popular cryptographic libraries.
Security News
Socket's package search now displays weekly downloads for npm packages, helping developers quickly assess popularity and make more informed decisions.