
Research
Malicious npm Packages Impersonate Flashbots SDKs, Targeting Ethereum Wallet Credentials
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
github.com/shjala/gostats
gostats
is a simple, self contained package that collects runtime statistics from runtime.MemStats
and sends them over UDP to statsd as a set of gauges.
You need graphite and statsd running in your preferred way, for example using Docker:
docker pull graphiteapp/graphite-statsd
docker run -p 8080:80 -p 8125:8125/udp --rm --name statsd graphiteapp/graphite-statsd
Then simply, collect the data:
package main
import (
"fmt"
"github.com/shjala/gostats"
)
func main() {
// Endpoint is statsd endpoint address
var Endpoint = "localhost:2125"
// Tag is bucket tag
var Tag = "your_tag"
// collect stats every 5 seconds
err := gostats.Collect(Endpoint, Tag, 5, true, true, true)
if err != nil {
fmt.Printf("Failed to start collecting runtime stats : %v\n", err)
return
}
// Rest of the code
}
FAQs
Unknown package
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
Security News
Ruby maintainers from Bundler and rbenv teams are building rv to bring Python uv's speed and unified tooling approach to Ruby development.
Security News
Following last week’s supply chain attack, Nx published findings on the GitHub Actions exploit and moved npm publishing to Trusted Publishers.