
Research
Security News
Malicious npm Packages Target BSC and Ethereum to Drain Crypto Wallets
Socket uncovered four malicious npm packages that exfiltrate up to 85% of a victim’s Ethereum or BSC wallet using obfuscated JavaScript.
github.com/pablote/mock-http-server
Simple, fast, runtime configurable HTTP mock server.
Unlike most similar mock servers, you can change what a specific URL returns at runtime. So you can point your application to a fixed URL, and try different responses in time.
docker run -d -p 9090:9090 pablote/mock-http-server
Just GET any URL and you'll get a default response with status code 200 and empty body:
GET /foo/bar
To change what a specific URL returns, GET the URL with special query params:
/foo/bar
to return hello world
in the bodyGET /foo/bar?__body=hello%20world
/foo/bar/
status code to 500
GET /foo/bar?__status=500
/foo/bar/
status code to return 200
60% percent of the time, then return 500
for the remaining 40%GET /foo/bar?__status=60:200:500
docker build -t pablote/mock-http-server .
docker push pablote/mock-http-server:latest
FAQs
Unknown package
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket uncovered four malicious npm packages that exfiltrate up to 85% of a victim’s Ethereum or BSC wallet using obfuscated JavaScript.
Security News
TC39 advances 9 JavaScript proposals, including Array.fromAsync, Error.isError, and Explicit Resource Management, which are now headed into the ECMAScript spec.
Security News
Vite releases Rolldown-Vite, a Rust-based bundler preview offering faster builds and lower memory usage as a drop-in replacement for Vite.