Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
github.com/jordanoluz/goexpert-weather-api
This is a simple weather API project developed in Go that provides temperature information based on the postal code (zipcode), using Open Telemetry and Zipkin for tracing and spans.
Clone this repository to your local machine:
git clone https://github.com/jordanoluz/goexpert-weather-api.git
Change into the project directory:
cd goexpert-weather-api
To run the project using Docker, use Docker Compose to build and start the containers:
docker compose up -d --build
This will build the Docker images and start the application containers.
The Docker Compose setup will automatically run tests using the go test command before starting the application.
Once the container is running, you can test the API using the following curl
commands:
curl -X POST http://localhost:8181/weather \
-H "Content-Type: application/json" \
-d '{
"cep": "29902555"
}'
Expected response: City name and temperature data for the given zipcode.
After making the requests mentioned in step 5, you can access the following URL to view the tracing and span data:
http://localhost:9411
This will display the tracing results, allowing you to monitor the flow of requests through OpenTelemetry and Zipkin.
FAQs
Unknown package
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.