Research
Security News
Malicious npm Package Targets Solana Developers and Hijacks Funds
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
github.com/vmware-tanzu/cartographer
Cartographer is a Kubernetes-native Choreographer providing higher modularity and scalability for the software supply chain.
Examples of using Cartographer can be found in the examples folder of this repository. The examples begin by demonstrating how to define a Supply Chain that pulls code from a repository, builds an image for the code, and deploys in the same cluster. Enhancements of that example (e.g. adding tests) are then demonstrated.
The quickest method to install Cartographer leverages the cartographer.yaml
file provided with each release:
kubectl create namespace cartographer-system
kubectl apply -f https://github.com/vmware-tanzu/cartographer/releases/latest/download/cartographer.yaml
And you're done!
Detailed documentation for Cartographer can be found in the site
folder of this repository:
Cartographer is developed in the open and is constantly improved by our users, contributors and maintainers. It is because of you that we are able to configure Kubernetes resources into reusable Supply Chains.
Join us!
If you have questions or want to get the latest project news, you can connect with us in the following ways:
Pull Requests and feedback on issues are very welcome! See the issue tracker if you're unsure where to start, especially the Good first issue label, and also feel free to reach out to discuss.
If you are ready to jump in and test, add code, or help with documentation, please follow the instructions on our Contribution Guidelines to get started and - at all times- follow our Code of Conduct.
Apache 2.0. Refer to LICENSE for details.
FAQs
Unknown package
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
Security News
Research
Socket researchers have discovered malicious npm packages targeting crypto developers, stealing credentials and wallet data using spyware delivered through typosquats of popular cryptographic libraries.
Security News
Socket's package search now displays weekly downloads for npm packages, helping developers quickly assess popularity and make more informed decisions.