Research
Security News
Malicious npm Package Targets Solana Developers and Hijacks Funds
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
vitess.io/vitess/examples/are-you-alive
What does it mean to be alive?
Well we don't know what it means for you, but we know what it means for a Vitess Cluster!
This project contains a simulated client application that can be used to measure the health of a Vitess cluster over time.
For now, there is a specific database schema and vschema that you must apply to the database that you are using for this test.
This client application:
That's it!
First, initialize your database with the correct schemas.
Run are-you-alive --help
for usage. You can use the command line flags to
control the dataset size, whether to target reads at primaries and replicas, your
mysql connection string, and the rate at which to send requests.
Example:
./are-you-alive --mysql_connection_string <mysql_connection_string>
Where <mysql_connection_string>
points to the database you are trying to test,
and everything else will be set to defaults.
go build vitess.io/vitess/examples/are-you-alive/cmd/are-you-alive
First, install docker compose and make sure it's working. Then run:
docker-compose build
docker-compose up
This will create a local mysqld and a local prometheus to scrape the app. It
will also start the app with the --initialize
flag which tells it to
automatically create the test database. You might have to run this twice to
give mysql a chance to do its first initialization.
After you run docker compose, navigate to http://localhost:9090
to see
Prometheus and http://localhost:8080/metrics
to see the raw metrics being
exported.
Queries can target specific tablet types. In the configuration file you simply need to, for example, put "@primary" or "@replica" on the ends of your connection strings.
If you have push access to the planetscale public registry, you can use the following commands to build and push the image:
make build
make push
FAQs
Unknown package
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
Security News
Research
Socket researchers have discovered malicious npm packages targeting crypto developers, stealing credentials and wallet data using spyware delivered through typosquats of popular cryptographic libraries.
Security News
Socket's package search now displays weekly downloads for npm packages, helping developers quickly assess popularity and make more informed decisions.