
Research
PyPI Package Disguised as Instagram Growth Tool Harvests User Credentials
A deceptive PyPI package posing as an Instagram growth tool collects user credentials and sends them to third-party bot services.
github.com/withspectrum/callback-to-async-iterator
callback-to-async-iterator
Turn any callback-based listener into an async iterator.
We needed this module to turn our database listeners into async iterators, which is what GraphQL subscriptions expect to be passed. It might be useful for you too!
npm install callback-to-async-iterator
Imagine a standard callback-based listener like this:
// callback will be called with each new message added to the database
const listenToNewMessages = (callback) => {
return db.messages.listen(message => callback(message));
}
The problem is that callbacks are push based, they push values to the listener whenever a new value is availabe. Async Iterators on the other hand are pull based, they request a new value and wait until it is available.
This module reconciliates that difference so you can turn your standard callback-based listener into an async iterator:
import asyncify from 'callback-to-async-iterator';
const messages = asyncify(listenToNewMessages);
// Wait until the first message is sent
const firstMessage = await messages.next();
// Asynchronously iterate over new messages and log them as they come in
for await (let message of messages) {
console.log(message);
}
console.log('Done!')
This module will automatically buffer incoming data if .next
hasn't been called yet.
onClose
: A function that's called with whatever you resolve from the listener after the async iterator is done, perfect to do cleanuponError
: A function that's called with any error that happens in the listener or async iteratorbuffering
: (default: true
) Whether incoming values should be buffered in between requests for the next value in the async iterable (note: disabling this will make your iterator "lossy" if you don't immediately call .next()
)asyncify(listenToNewMessages, {
// Close the database connection when the async iterator is done
// NOTE: This is passed whatever the listener resolves the returned promise with, in this case listenToNewMessages resolves with the database connection but it could be whatever you desire
onClose: (connection) => { connection.close(); },
// Log errors to your error tracking system
onError: (err) => {
errorTracking.capture(err);
},
buffering: false
})
This module is heavily based on the event emitter to async iterator utility used in graphql-js
. Also big shoutout to @ForbesLindesay who helped a ton with the initial implementation and understanding the problem.
Licensed under the MIT License, Copyright ©️ 2017 Maximilian Stoiber. See LICENSE.md for more information.
FAQs
Unknown package
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
A deceptive PyPI package posing as an Instagram growth tool collects user credentials and sends them to third-party bot services.
Product
Socket now supports pylock.toml, enabling secure, reproducible Python builds with advanced scanning and full alignment with PEP 751's new standard.
Security News
Research
Socket uncovered two npm packages that register hidden HTTP endpoints to delete all files on command.