Research
Security News
Malicious npm Package Targets Solana Developers and Hijacks Funds
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
github.com/saladtechnologies/saladcloud-job-queue-worker-sdk
This project contains the SaladCloud Job Queue Worker, SDK, and samples. Refer to the Job Queues documentation for more information on using this with your SaladCloud-deployed workloads.
The SaladCloud Job Queue Worker automatically discovers the appropriate service endpoints when running on SaladCloud and no additional configuration is required.
The SaladCloud Job Queue Worker, by default, only prints error level log lines to minimize any potential noise in your workload logs. You may optionally override the log level to print more detailed log lines for monitoring or troubleshooting purposes. The default log level may be overridden using the SALAD_LOG_LEVEL
environment variable. Valid values are debug
, info
, warn
, and error
. The SaladCloud Job Queue Worker will exit on startup if an invalid value is provided.
See the Mandelbrot workload sample in the samples/mandelbrot
directory for examples of different strategies that may be used to embed and run the SaladCloud Job Queue Worker in an existing workload container image.
The following prerequisites are required:
Clone the repository.
git clone https://github.com/SaladTechnologies/salad-cloud-job-queue-worker.git
Restore the dependencies.
go mod download
go mod verify
Build the project.
make build
The build artifacts will be available in the build
directory.
FAQs
Unknown package
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
Security News
Research
Socket researchers have discovered malicious npm packages targeting crypto developers, stealing credentials and wallet data using spyware delivered through typosquats of popular cryptographic libraries.
Security News
Socket's package search now displays weekly downloads for npm packages, helping developers quickly assess popularity and make more informed decisions.