
Research
/Security News
9 Malicious NuGet Packages Deliver Time-Delayed Destructive Payloads
Socket researchers discovered nine malicious NuGet packages that use time-delayed payloads to crash applications and corrupt industrial control systems.
github.com/muhammadfarhankt/nft-marketplace
Advanced tools
Go Programming Language
Clean Architecture (Hexagonal) & Microservices (DDD - Domain Driven Design)
gRPC & Apache Kafka
Fiber Framework
PostgreSQL & MongoDB
JWT
Kubernetes
docker run --name nft_marketplace_test -e POSTGRES_USER=user -e POSTGRES_PASSWORD=123456 -p 4444:5432 -d postgres:alpine
docker exec -it nft_marketplace_test bash
psql -U user
CREATE DATABASE nft_marketplace_test;
\l
# Migrate up
migrate -database 'postgres://user:123456@localhost:4444/nft_marketplace_test?sslmode=disable' -source <path> -verbose up
# Migrate down
migrate -database 'postgres://user:123456@localhost:4444/nft_marketplace_test?sslmode=disable' -source <path> -verbose down
APP_HOST=127.0.0.1
APP_PORT=3000
APP_NAME=nft-marketplace
APP_VERSION=v0.1.0
APP_BODY_LIMIT=10490000 //10 MB
APP_API_KEY=pwnYdkPTacwhH2O1
APP_ADMIN_KEY=uKgDUvbpIJ44dvHx
APP_READ_TIMEOUT=60
APP_WRITE_TIMEOUT=60
APP_FILE_LIMIT=2097000 //2 MB
APP_GCP_BUCKET=nft-marketplace-dev-bucket
JWT_API_KEY=JwtApiKeycwhH2O1
JWT_ADMIN_KEY=JwtAdminKeyHxfdeG
JWT_SECRET_KEY=JwtSecretKey1KrA0
JWT_ACCESS_EXPIRES=86400 //1 Day
JWT_REFRESH_EXPIRES=604800 //7 Days
DB_HOST=127.0.0.1
DB_PORT=4444
DB_PROTOCOL=tcp
DB_USERNAME=user
DB_PASSWORD=123456
DB_DATABASE=nft_marketplace_test
DB_SSL_MODE=disable
DB_MAX_CONNECTIONS=25
go run main.go
FAQs
Unknown package
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
Socket researchers discovered nine malicious NuGet packages that use time-delayed payloads to crash applications and corrupt industrial control systems.

Security News
Socket CTO Ahmad Nassri discusses why supply chain attacks now target developer machines and what AI means for the future of enterprise security.

Security News
Learn the essential steps every developer should take to stay secure on npm and reduce exposure to supply chain attacks.