Research
Security News
Malicious npm Package Targets Solana Developers and Hijacks Funds
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
github.com/joseangelgallardoperez/wallet-files
Following environment variables are required for Velmie Wallet Files Service:
For usage examples and tips see this article.
The following table lists the configurable parameters of the wallet-files chart, and their default values.
Parameter | Description | Default |
---|---|---|
service.type | The type of a service e.g. ClusterIp, NodePort, LoadBalancer | ClusterIp |
service.ports.public | Application public API port. | 10308 |
service.ports.rpc | Application RPC port. | 12308 |
service.ports.unsafeExposeRPC | Forces to expose RPC port even if service.type other than ClusterIp | false |
service.selectors | List of additional selectors | {} |
containerPorts | List of ports that should be exposed on application container but in the service object. | [] |
containerLivenessProbe.enabled | Determines whether liveness probe should be performed on a pod. | |
containerLivenessProbe.failureThreshold | Number of requests that should be failed in order to treat container unhealthy | 5 |
containerLivenessProbe.periodSeconds | Number of seconds between check requests. | 15 |
appApiPathPrefix | API prefix path. Used with internal health check functionality. | files |
mysqlAdmin.user | Privileged database user name. Used in order to create DB schema and user. Required if hooks.dbInit.enabled=true. | |
mysqlAdmin.password | Privileged database user password. | |
hooks.dbInit.enabled | Enabled database init job. | false |
hooks.dbInit.createSchema | Determines whether to create database schema. Depends on hooks.dbInit.enabled | true |
hooks.dbInit.createUser | Determines whether to create database user that will be restricted to only use specified database schema. | true |
hooks.dbMigration.enabled | Determines whether to run database migrations. | |
ingress.enabled | Determines whether to create ingress resource for the service. | true |
ingress.annotations | List of additional annotations for the ingress. | {"kubernetes.io/ingress.class": "nginx"} |
ingress.tls.enabled | Determines whether TLS (https) connection should be set. | false |
ingress.tls.host | Host name that is covered by a certificate. This value is required if ingress.tls.enabled=true. | |
ingress.tls.secretName | Kubernetes secret name where TLS certificate is stored. | |
appEnv.corsMethods | Access-Control-Allow-Methods header that will be returned by the application. | GET,POST,PUT,OPTIONS |
appEnv.corsOrigins | Access-Control-Allow-Origin header that will be returned by the application. | * |
appEnv.corsHeaders | Access-Control-Allow-Headers header that will be returned by the application. | * |
appEnv.dbHost | Database host to which application will be connected | mysql |
appEnv.dbPort | Application database port. | 3306 |
appEnv.dbUser | Application database user. | |
appEnv.dbName | Application database name. | |
appEnv.dbDebugMode | Whether database queries should be logged. Debugging mode. | false |
appEnv.filesStorage | Defines which storage driver to use. Could be "local" or "s3". | s3 |
appEnv.s3AwsRegion | Specifies what AWS region to use. Required if appEnv.filesStorage=s3 | |
appEnv.s3AwsKeyId | AWS key id which will be used by "s3" file storage driver. Required if appEnv.filesStorage=s3 | |
appEnv.s3AwsSecretKey | AWS secret key which will be used by "s3" file storage driver. Required if appEnv.filesStorage=s3 | |
image.repository | What docker image to deploy. | 360021420270.dkr.ecr.eu-central-1.amazonaws.com/velmie/wallet-currencies |
image.pullPolicy | What image pull policy to use. | IfNotPresent |
image.tag | What docker image tag to use. | {Chart.yaml - appVersion} |
image.dbMigrationRepository | What docker image to run in order to execute database migrations. By default the value if image.repository + "-db-migration" | {image.tag}-db-migration |
image.dbMigrationTag | What docker image tag should be used for the db migration image. | Same as image.tag |
imagePullSecrets | List of secrets which contain credentials to private docker repositories. | [] |
nameOverride | Override this chart name. | wallet-files |
fullnameOverride | Override this chart full name. By default it is composed from release name and the chart name. | {releaseName}-{chartName} |
serviceAccount.create | Whether Kubernetes service account resource should be created. | false |
serviceAccount.annotations | Annotations to add to the service account | {} |
serviceAccount.name | The name of the service account to use. If not set and create is true, a name is generated using the fullname template. | See description |
podAnnotations | Kubernetes pod annotations. | {} |
securityContext | A security context defines privilege and access control settings for a Pod or Container. See details | {} |
resources | Limit Pod computing resources. See details | {} |
autoscaling.enabled | Determines whether autoscaling functionality is enabled. | false |
autoscaling.minReplicas | See details | 1 |
autoscaling.maxReplicas | See details | 5 |
autoscaling.targetCPUUtilizationPercentage | See details | 80 |
nodeSelector | See details | {} |
tolerations | See details | [] |
affinity | See details | {} |
Tilt automates all the steps from a code change to a new process: watching files, building container images, and bringing your environment up-to-date.
See this article which explains how to work with Tilt regarding this project.
FAQs
Unknown package
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
Security News
Research
Socket researchers have discovered malicious npm packages targeting crypto developers, stealing credentials and wallet data using spyware delivered through typosquats of popular cryptographic libraries.
Security News
Socket's package search now displays weekly downloads for npm packages, helping developers quickly assess popularity and make more informed decisions.