Research
Security News
Malicious npm Package Targets Solana Developers and Hijacks Funds
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
go.opentelemetry.io/collector/exporter/otlphttpexporter
Status | |
---|---|
Stability | development: profiles |
beta: logs | |
stable: traces, metrics | |
Distributions | core, contrib, k8s, otlp |
Issues |
Export traces and/or metrics via HTTP using OTLP format.
The following settings are required:
endpoint
(no default): The target base URL to send data to (e.g.: https://example.com:4318).
To send each signal a corresponding path will be added to this base URL, i.e. for traces
"/v1/traces" will appended, for metrics "/v1/metrics" will be appended, for logs
"/v1/logs" will be appended.The following settings can be optionally configured:
traces_endpoint
(no default): The target URL to send trace data to (e.g.: https://example.com:4318/v1/traces).
If this setting is present the endpoint
setting is ignored for traces.metrics_endpoint
(no default): The target URL to send metric data to (e.g.: https://example.com:4318/v1/metrics).
If this setting is present the endpoint
setting is ignored for metrics.logs_endpoint
(no default): The target URL to send log data to (e.g.: https://example.com:4318/v1/logs).
If this setting is present the endpoint
setting is ignored logs.tls
: see TLS Configuration Settings for the full set of available options.timeout
(default = 30s): HTTP request time limit. For details see https://golang.org/pkg/net/http/#Clientread_buffer_size
(default = 0): ReadBufferSize for HTTP client.write_buffer_size
(default = 512 * 1024): WriteBufferSize for HTTP client.encoding
(default = proto): The encoding to use for the messages (valid options: proto
, json
)Example:
exporters:
otlphttp:
endpoint: https://example.com:4318
By default gzip
compression is enabled. See compression comparison for details benchmark information. To disable, configure as follows:
exporters:
otlphttp:
...
compression: none
By default proto
encoding is used, to change the content encoding of the message configure it as follows:
exporters:
otlphttp:
...
encoding: json
The full list of settings exposed for this exporter are documented here with detailed sample configurations here.
FAQs
Unknown package
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
Security News
Research
Socket researchers have discovered malicious npm packages targeting crypto developers, stealing credentials and wallet data using spyware delivered through typosquats of popular cryptographic libraries.
Security News
Socket's package search now displays weekly downloads for npm packages, helping developers quickly assess popularity and make more informed decisions.