Research
Security News
Malicious npm Package Targets Solana Developers and Hijacks Funds
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
github.com/screebapp/benchmark-segment-subscription
This project has been built for helping companies to create Segment connectors using subscriptions API (webhook). It allows to send a high volume of identity/group/alias/track/page/screen calls.
Segment subscriptions are documented here: https://segment.com/docs/partners/subscriptions/build-webhook/.
For load testing, just increase the concurrency
and requests
arguments.
identities
(1 userId + 5 anonymousIds)sentAt
< receivedAt
< timestamp
During execution, properties sent into identify
, group
, track
, page
and screen
calls will always have the same data type (number, string, datetime, boolean, object, array).
identify
group
alias
track
page
screen
Events will be triggered in a random order, and will be emitted from random users.
This tool only support basic token authentication.
go get github.com/ScreebApp/segment-subscription-event-producer
go run github.com/ScreebApp/segment-subscription-event-producer \
--requests 10000 \
--concurrency 100 \
--endpoint-url http://localhost:3000/webhook \
--token xxxxxx
go run *.go -n 100 -c 2 -e http://localhost:3000/webhook -t xxx
context
payload (see "common fields" section in doc)FAQs
Unknown package
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
Security News
Research
Socket researchers have discovered malicious npm packages targeting crypto developers, stealing credentials and wallet data using spyware delivered through typosquats of popular cryptographic libraries.
Security News
Socket's package search now displays weekly downloads for npm packages, helping developers quickly assess popularity and make more informed decisions.