Research
Security News
Malicious npm Package Targets Solana Developers and Hijacks Funds
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
github.com/isaporiti/stock-api
Basic Web API that serves stub stock prices for some supported tickers and users' stock portfolios.
Having Docker installed, you can run
# using Makefile
make docker_build
make docker_run
# or otherwise
docker build -t stock-api .
docker run --rm -p 5001:5001 stock-api
go run cmd/main.go
There are two authorized usernames: testA
and testB
. You can try the endpoints with the following:
# user testA
curl --request GET \
--url http://localhost:5001/tickers \
--header 'Authorization: Basic dGVzdEE6'
# user testB
curl --request GET \
--url http://localhost:5001/tickers \
--header 'Authorization: Basic dGVzdEI6'
curl --request GET \
--url http://localhost:5001/tickers/FB/history \
--header 'Authorization: Basic dGVzdEI6'
curl --request GET \
--url http://localhost:5001/tickers \
--header 'Authorization: Basic dW5rbm93bjo='
You can query the history price for these tickers. Querying for anything else will result in a 404 Not found
response.
AAPL
MSFT
GOOG
AMZN
FB
TSLA
NVDA
JPM
BABA
JNJ
WMT
PG
PYPL
DIS
ADBE
PFE
V
MA
CRM
NFLX
FAQs
Unknown package
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
Security News
Research
Socket researchers have discovered malicious npm packages targeting crypto developers, stealing credentials and wallet data using spyware delivered through typosquats of popular cryptographic libraries.
Security News
Socket's package search now displays weekly downloads for npm packages, helping developers quickly assess popularity and make more informed decisions.