Research
Security News
Malicious npm Package Targets Solana Developers and Hijacks Funds
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
github.com/jordanoluz/goexpert-weather-api
This is a simple weather API project developed in Go, which provides temperature information based on the postal code (zipcode).
The API is published and available at the following URL:
Base URL: https://goexpert-weather-api-1036920645078.southamerica-east1.run.app/weather
You can use this base URL to test the API endpoints without needing to run the project locally.
Clone this repository to your local machine:
git clone https://github.com/jordanoluz/goexpert-weather-api.git
cd goexpert-weather-api
To run the project, use Docker Compose to build and start the containers:
docker-compose up -d --build
This will build the Docker image and start the container with the application.
The Docker Compose setup will automatically run tests using the go test command before starting the application.
Once the container is running, you can test the API using the following curl commands:
curl "http://localhost:8080/weather?zipcode=93010001"
Expected response: Temperature data for the given zipcode.
curl "http://localhost:8080/weather?zipcode=1234"
Expected response: invalid zipcode
.
curl "http://localhost:8080/weather?zipcode=78654321"
Expected response: can not find zipcode
.
FAQs
Unknown package
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
Security News
Research
Socket researchers have discovered malicious npm packages targeting crypto developers, stealing credentials and wallet data using spyware delivered through typosquats of popular cryptographic libraries.
Security News
Socket's package search now displays weekly downloads for npm packages, helping developers quickly assess popularity and make more informed decisions.