Research
Security News
Malicious npm Package Targets Solana Developers and Hijacks Funds
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
github.com/feilongjump/api.howio.world
个人站点的 API,用 Go 语言进行开发的接口,前端页面放在这里了
.
├── app 项目应用文件
│ └── http HTTP 文件
│ └── controllers Controller
│ └── middlewares 中间件
│ └── requests 请求参数校验文件
│ └── models Model
├── bootstrap 程序初始化的代码
│ └── config.go 初始化配置
│ └── ... ...
├── route 路由文件
│ └── api.go API 路由
├── internal 内部引用的 Go 包
│ └── config 环境配置包
│ └── ... ...
├── .air.toml 自动重载应用配置文件
├── .gitignore git 忽略文件
├── env.*.toml 项目环境配置文件
├── go.mod Go 模块文件
├── go.sum Go 模块的依赖版本文件
├── main.go 项目应用入口文件
└── README.md 项目手册
不一定会提前写好有什么,但有的东西就会补充上去。
FAQs
Unknown package
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
Security News
Research
Socket researchers have discovered malicious npm packages targeting crypto developers, stealing credentials and wallet data using spyware delivered through typosquats of popular cryptographic libraries.
Security News
Socket's package search now displays weekly downloads for npm packages, helping developers quickly assess popularity and make more informed decisions.