
Security News
/Research
Popular node-ipc npm Package Infected with Credential Stealer
Socket detected malicious node-ipc versions with obfuscated stealer/backdoor behavior in a developing npm supply chain attack.
@0bdx/srv-api
Advanced tools
A simple JSON API in Node.js which works with Mongo-like databases.
â
 Version: 0.0.8
â
 NPM: https://www.npmjs.com/package/@0bdx/srv-api
â
 Repo: https://github.com/0bdx/srv-api
â
 AWS Billing Dashboard:
https://eu-central-1.console.aws.amazon.com/billing
â
 App Runner Console:
https://eu-central-1.console.aws.amazon.com/apprunner
To use port 1234 (instead of 8080, the default):
$ PORT=1234 npm start
All prices here are before tax.
As far as I can tell, âGitHub connectionsâ do not appear on the AWS invoice, and are not charged for.
Bandwidth falls under the year-long free tier, and memory-usage does not seem to be charged-for:
App Runner is fairly cheap. You are charged by the hour, with separate charges for the âbuildâ service, and the ârunâ service. The ârunâ service is divided into âprovisionedâ (which I think is âup timeâ), and a charge for CPU time.
On the free tier, while developing this repo, I recreated the app maybe twelve times, so the âbuildâ charge is much higher than a real app would be:
Note that âAutomatic deploymentsâ could cost $1 per application per month.
I did try using these, but didnât see a charge appear on my bill yet.
Bandwidth falls under the year-long free tier, and memory-usage does not seem to be charged-for:
Thereâs a free log-monitoring service called CloudWatch which could probably be switched off (the App Runner console provides logs you can manually refresh):
Click âGitHub connectionsâ in the sidebar at https://eu-central-1.console.aws.amazon.com/apprunner.
If this is the first time youâve used App Runner, it will probably be empty.
Click âCreate an App Runner serviceâ at https://eu-central-1.console.aws.amazon.com/apprunner.
Click âSource code repositoryâ.
Under âConnect to GitHubâ, click âAdd newâ.
Wait for a new window to open (disable your popup-blocker browser extension).
srv-api--cnxAfter clicking âNextâ, and clicking âGitHub connectionsâ in the sidebar again,
you should see srv-api--cnx listed.
This app is set to deploy from main, manually (so, pushes to main do not
automatically deploy a new version of the service).
Click âCreate an App Runner serviceâ at https://eu-central-1.console.aws.amazon.com/apprunner.
Source code repositorysrv-api--cnx ⢠srv-api ⢠mainManual (or Automatic, which costs $1 per application per month)Configure all settings hereNodejs 16npm install (should only install deps, not â he dev-deps)npm start (or npm start -- -dvw while debugging)8080srv-api-App-Runner-Instance1 vCPU ⢠2 GB/ (which MUST respond with a 200 HTTP status)20 (once every 20 seconds is the maximum AWS allows)âŚand keep the defaults for all the other settings.
Click âNextâ and then âCreate and deployâ.
w
FAQs
A simple JSON API in Node.js which works with Mongo-like databases.
We found that @0bdx/srv-api demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
/Research
Socket detected malicious node-ipc versions with obfuscated stealer/backdoor behavior in a developing npm supply chain attack.

Security News
TeamPCP and BreachForums are promoting a Shai-Hulud supply chain attack contest with a $1,000 prize for the biggest package compromise.

Security News
Packagist urges PHP projects to update Composer after a GitHub token format change exposed some GitHub Actions tokens in CI logs.