Research
Security News
Malicious npm Package Targets Solana Developers and Hijacks Funds
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
github.com/streamdal/rabbitmq-amqp091-go
[!IMPORTANT] This library is instrumented with Streamdal's Go SDK.
Refer to README.STREAMDAL.md for more information.
This is a Go AMQP 0.9.1 client maintained by the RabbitMQ core team. It was originally developed by Sean Treadway.
Some things are different compared to the original client, others haven't changed.
This library uses a different package name. If moving from streadway/amqp
,
using an alias may reduce the number of changes needed:
amqp "github.com/rabbitmq/amqp091-go"
This client uses the same 2-clause BSD license as the original project.
This client retains key API elements as practically possible. It is, however, open to reasonable breaking public API changes suggested by the community. We don't have the "no breaking public API changes ever" rule and fully recognize that a good client API evolves over time.
This project is based on a mature Go client that's been around for over a decade.
This client supports two most recent Go release series.
This project supports RabbitMQ versions starting with 2.0
but primarily tested
against currently supported RabbitMQ release series.
Some features and behaviours may be server version-specific.
Provide a functional interface that closely represents the AMQP 0.9.1 model targeted to RabbitMQ as a server. This includes the minimum necessary to interact the semantics of the protocol.
Things not intended to be supported.
basic.return
and basic.ack
frame ordering.
This client uses Go channels for certain protocol events and ordering between
events sent to two different channels generally cannot be guaranteed.See the _examples subdirectory for simple producers and consumers executables. If you have a use-case in mind which isn't well-represented by the examples, please file an issue.
Pull requests are very much welcomed. Create your pull request on a non-main branch, make sure a test or example is included that covers your change, and your commits represent coherent changes that include a reason for the change.
See CONTRIBUTING.md for more information.
BSD 2 clause, see LICENSE for more details.
FAQs
Unknown package
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
Security News
Research
Socket researchers have discovered malicious npm packages targeting crypto developers, stealing credentials and wallet data using spyware delivered through typosquats of popular cryptographic libraries.
Security News
Socket's package search now displays weekly downloads for npm packages, helping developers quickly assess popularity and make more informed decisions.