Research
Security News
Malicious npm Package Targets Solana Developers and Hijacks Funds
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
github.com/flowchartsman/newsbot
A twitter streaming, website-scraping, websocket-transporting news delivery webapp written in Go and Javascript1
These docs are shitty. They are also new, and will be less shitty very soon.
$ git clone https://github.com/anaxagoras/newsbot.git
$ cd wherever/you/just/put/that
$ go build
$ ./newsbot
The bot is configured by the newsbot.conf file, which is written in TOML.
A sample, seen below has been provided in newsbot.conf.example, which you'll need to edit and rename to newsbot.conf to get it to work. It should be pretty self explanatory if you know what you're doing. If not, I'll document it later, I promise. It's not that hard.
Port = ":8080"
LogLevel = "debug"
# Twitter auth settings
User = "yourusername"
ConsumerKey = "<consumer key here>"
ConsumerSecret = "<consumer secret here>"
OAuthToken = "<OAuth token here>"
OAuthSecret = "<OAuth secret here>"
# Twitter users to follow
Users = [
1652541, # @Reuters
51241574, # @AP
18424289, # @AJELive
5402612, # @BBCBreaking
742143, # @BBCWorld
362051343, # @breakingstorm
1068831 # @slashdot
]
# Keywords are temporarily unsupported in order to keep the bandwidth down and
# because the message culling algorithm currently ignores them.
#Keywords = [
# "#YOLO",
#]
[[scrapers]]
name = "Mysite"
# Located in /static
icon = "mysite.png"
# Pull it every 5 seconds
interval = 5
url = "http://www.my.great.site"
# We want any anchor of class "story" directly underneath things of class 'article'
target = ".article > a.story"
# We don't want any links whose text starts with "Catpics"
excluder = '^Catpics'
# This site always puts a link prefix for tracking. We don't want that.
modifier = 'http://links.my.great.site.com/\d+/'
NewsBot "works" in the loosest sense only at the moment. Links are delivered via webscraped stories, but not rendered. Twitter links are rendered, but not extracted. The "UI" is laughably bad because I'm still figuring out what's getting pushed up to the user. So, yeah, I have a few things to work on, but I'm super serial now.
1: Or whatever. Someone pls halp me. gopherjs maybe?
FAQs
Unknown package
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
Security News
Research
Socket researchers have discovered malicious npm packages targeting crypto developers, stealing credentials and wallet data using spyware delivered through typosquats of popular cryptographic libraries.
Security News
Socket's package search now displays weekly downloads for npm packages, helping developers quickly assess popularity and make more informed decisions.