Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
github.com/stack-labs/stack
Stack-RPC旨在为中国开发者提供通用的分布式服务微服务开发库(比如配置管理、服务发现、熔断降级、路由、服务代理、安全、主从选举等)。基于Stack,开发者可以快速投入自身的业务开发中,只需要极少的学习成本。Stack适用于中小规模的开发场景,她可以轻易在桌面电脑、服务器、容器集群中搭建分布式服务。
公众号 | 讨论群 |
讨论群:微信搜索MicroHQ,备注来源:“github”
启动一个微服务只需要如下代码
func main() {
service := stack.NewService(stack.Name("stack.rpc.greeter"))
service.Init()
service.Run()
}
我们封装了微服务内在的复杂度,比如服务注册与发现、配置管理等。用户只需要花极小的成本学习如何暴露接口,如何启动服务,剩下的精力完全投放在业务需求的开发上。
Stack-RPC既提供轻量的开发库,同时也提供对应高级别的扩展库,为大家带来开箱即用的开发体验。
支持的特性主要有:
我们为一直为大家准备持续开发、更新、愈加丰富的文档与资料:StackLabs
FAQs
Unknown package
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.