Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
sethlans.io/code/jlbrian/rocketchat-google-calendar-modified.git
This integration uses Rocket.Chat incoming webhook. With this integration, you'll get your event notifications right into Rocket.Chat.
Administration
then Integration
.rocket.cat
. You can use other usernames as well, you're free to experiment.As soon as the webhook is saved, you'll notice a webhook URL -
We'll need this in the next step.
The integration program runs on a server, periodically grabs the event data from your calendar and sends that data to your Rocket.Chat server to be processed and sent to the channel you set up in the previous section.
To install the integration program, the easiest way is to first install the go binary and the run the following command -
go get github.com/debdutdeb/rocketchat-google-calendar
Edit your bashrc
, zshrc
or fish
config and add $(go env GOPATH)/bin
to your PATH
. This way you won't have to specify the whole path to the command every time.
Use the help option to learn all the command line options and modify its execution process - rocketchat-google-calendar -h
Usage of ./rocketchat-google-calendar:
-calendars string
List of calendar IDs, separated by commas. (default "primary")
-timezone string
Specify the timezone the start and end dates should be in (default: "America/New_York")
-credentials string
Enter path to the credentials file. (default "credentials.json")
-eventin string
The upper limit of upcoming event start time. Lower bound is the moment of API access. (default "30m")
-waitfor string
Time to wait before attempting a POST to Rocket.Chat webhook. (default "5m")
-webhook string
Enter the webhook url you got from Rocket.Chat.
Enter the appropriate values for the respective options.
You'll then be asked to open a link. Click on it and use your Google account to authorize the app.
Once you get the token, copy and paste it on the terminal and hit enter.
Your integration should now be running.
In the example command above, the event data is fetched from the Google servers every 5 minutes. You can change that behaviour however you like.
One very common usecase is to be notified about all the meetings/events for each day, in the morning. You can acheive this by combining the two flags -eventin
and -waitfor
.
Use 24h
for both of those options. This way the integration program will fetch data every 24 hours, list the events that's going to occur in those 24 hours and send them to your Rocket.Chat server.
FAQs
Unknown package
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.