Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
github.com/tetra12/caddy-grpc-web
This module implements a bridge from gRPC-Web clients to gRPC servers. It is similar to Envoy's envoy.filters.http.grpc_web
filter. It is EXPERIMENTAL and subject to change.
To convert gRPC-Web requests to gRPC, simply add the grpc_web
handler to your HTTP route. It should go before your reverse_proxy
or any other handler that would expect a gRPC request.
A new Caddy server with this module needs to be built to support GRPC-web calls. Build it with:
docker build -t <account_name>/caddy-grpc .
Caddyfile:
{
order grpc_web before reverse_proxy
}
:5452 {
grpc_web
reverse_proxy h2c://127.0.0.1:50051
}
JSON:
{
"apps": {
"http": {
"servers": {
"srv0": {
"listen": [
":5452"
],
"routes": [
{
"handle": [
{
"handler": "grpc_web"
},
{
"handler": "reverse_proxy",
"transport": {
"protocol": "http",
"versions": [
"h2c",
"2"
]
},
"upstreams": [
{
"dial": "127.0.0.1:50051"
}
]
}
]
}
]
}
}
}
}
}
You can also specify the websocket_ping
parameter to an interval value >= 1s for websocket keep-alive pings to be enabled.
FAQs
Unknown package
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.