Research
Security News
Malicious npm Package Targets Solana Developers and Hijacks Funds
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
github.com/jraedisch/caddilytics
This repository contains a minimal Caddy module for tracking HTTP requests via Google Analytics Measurement Protocol.
Any advice/criticism/PRs are welcome!
Caddilytics is compatible with Caddy V2 only. Earlier commits supported Caddy pre V1, so feel free to browse history for info.
All requests are being tracked as pageview
s with the following data:
dl
(location URL)dr
(referer)ua
(user agent)ul
(language)Tracking is done asynchronously with a timeout of 1
second.
caddilytics UA-1234-5 session-cookie
You will also have to define a global order (or a route) in your Caddyfile:
{
order caddilytics before header
}
A http only, secure session cookie will be set with an unencrypted random UUID if none is set already.
exd
(exception description) as hit type exception
.qt
(queue time).Copyright (c) 2017 Jasper Rädisch. See the LICENSE file for license rights and limitations (MIT).
FAQs
Unknown package
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
Security News
Research
Socket researchers have discovered malicious npm packages targeting crypto developers, stealing credentials and wallet data using spyware delivered through typosquats of popular cryptographic libraries.
Security News
Socket's package search now displays weekly downloads for npm packages, helping developers quickly assess popularity and make more informed decisions.