Research
Security News
Malicious npm Package Targets Solana Developers and Hijacks Funds
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
github.com/googlecloudplatform/rcloadenv
rcloadenv
is a tool for loading configuration from the Runtime Config
API.
The language-specific implementations all load configurations from the Runtime Config API. Choose the one that best fits your development environment.
go get -u github.com/GoogleCloudPlatform/rcloadenv
pip install rcloadenv
For more information on using rcloadenv
with Python, see
python/README.rst.
Using npm
:
npm install -g @google-cloud/rcloadenv
Using yarn
:
yarn global add @google-cloud/rcloadenv
For more information on using rcloadenv
with Node.js, see
nodejs/README.md.
Install the gem:
gem install rcloadenv
Or include "rcloadenv" in your application's Gemfile.
For more information on using rcloadenv
with Ruby, see ruby/README.md.
First, create a configuration using the Google Cloud SDK.
gcloud beta runtime-config configs create my-config
Then set the variables you wish to load. Variable names will be transformed from lowercase to uppercase, separated by underscores.
gcloud beta runtime-config configs variables set \
my-variable-name my-value \
--is-text --config-name my-config
To specify the project, set the GOOGLE_CLOUD_PROJECT
environment variable.
export GOOGLE_CLOUD_PROJECT=my-project-id
Use the rcloadenv
command to launch your process.
rcloadenv my-config -- bash -c 'echo $MY_VARIABLE_NAME'
This is not an official Google product, experimental or otherwise.
FAQs
Unknown package
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
Security News
Research
Socket researchers have discovered malicious npm packages targeting crypto developers, stealing credentials and wallet data using spyware delivered through typosquats of popular cryptographic libraries.
Security News
Socket's package search now displays weekly downloads for npm packages, helping developers quickly assess popularity and make more informed decisions.