
Research
NPM targeted by malware campaign mimicking familiar library names
Socket uncovered npm malware campaign mimicking popular Node.js libraries and packages from other ecosystems; packages steal data and execute remote code.
org.kaliy.kafka:kafka-connect-rss
Advanced tools
Kafka Connect RSS and Atom Source Connector.
Connector supports polling multiple URLs and sending output to a single topic. Sample configuration file can be found in the repository here.
URLs should be percent encoded and separated by space. Tasks will be split evenly, e.g. for 5 URLs and 3 tasks.max
there will be 3 tasks created with 2, 2 and 1 URLs each.
If tasks.max
is higher than provided number of URLs, only the necessary number of tasks will be created with 1 URL each.
Connector has following configuration options:
Name | Description | Type | Default Value | Importance |
---|---|---|---|---|
rss.urls | RSS or Atom feed URLs | string | high | |
topic | Topic to write to | string | high | |
sleep.seconds | Time in seconds that connector will wait until querying feed again | int | 60 | medium |
Message has following schema:
{
"schema": {
"type": "struct",
"fields": [
{
"type": "struct",
"fields": [
{
"type": "string",
"optional": true,
"field": "title"
},
{
"type": "string",
"optional": false,
"field": "url"
}
],
"optional": false,
"name": "org.kaliy.kafka.rss.Feed",
"version": 1,
"field": "feed"
},
{
"type": "string",
"optional": false,
"field": "title"
},
{
"type": "string",
"optional": false,
"field": "id"
},
{
"type": "string",
"optional": false,
"field": "link"
},
{
"type": "string",
"optional": true,
"field": "content"
},
{
"type": "string",
"optional": true,
"field": "author"
},
{
"type": "string",
"optional": true,
"field": "date"
}
],
"optional": false,
"name": "org.kaliy.kafka.rss.Item",
"version": 1
}
}
Sample message with JSON converter without embedded schema:
{
"feed": {
"title": "CNN.com - RSS Channel - App International Edition",
"url": "http://rss.cnn.com/rss/edition.rss"
},
"title": "The 56,000-mile electric car journey",
"id": "https://www.cnn.com/2019/03/22/motorsport/electric-car-around-the-world-wiebe-wakker-spt-intl/index.html",
"link": "https://www.cnn.com/2019/03/22/motorsport/electric-car-around-the-world-wiebe-wakker-spt-intl/index.html",
"content": "For three years and 90,000 kilometers and counting, he's traveled the world powered both by electricity and strangers' kindness.",
"author": "CNN",
"date": "2019-03-22T13:34:17Z"
}
Some development notes can be found here.
To compile and execute unit and integration tests mvn verify
command can be used.
FAQs
Kafka RSS and Atom Source connector.
We found that org.kaliy.kafka:kafka-connect-rss demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Socket uncovered npm malware campaign mimicking popular Node.js libraries and packages from other ecosystems; packages steal data and execute remote code.
Research
Socket's research uncovers three dangerous Go modules that contain obfuscated disk-wiping malware, threatening complete data loss.
Research
Socket uncovers malicious packages on PyPI using Gmail's SMTP protocol for command and control (C2) to exfiltrate data and execute commands.