Security News
Supply Chain Attack Detected in Solana's web3.js Library
A supply chain attack has been detected in versions 1.95.6 and 1.95.7 of the popular @solana/web3.js library.
@667/ngrok-dns
Advanced tools
Ngrok-dns is a plugin of sorts to the ngrok npm package that enables domain features of ngrok which are not available on the free plan. Ngrok-dns will create a TXT record pointing to the new tunnel each time it changes.
Further you can generate a fixed URL using the service at https://ngrok-dns.june07.com.
ngrok tunnel url is dynamic and will change during your development cycle |
cloudflare TXT records can then be easily accessed from webhooks and other disconnected parts of dev project |
npm install @667/ngrok-dns
[ | |
---|---|
highlighed locations show requirement for ngrok-dns usage | similar setup for localtunnel usage |
const ngrok = require('./index'),
ngrokDNS = require('@667/ngrok-dns');
(async function () {
const url = await ngrok.connect({
addr: 'https://localhost:3000',
onLogEvent: ngrokDNS
});
})();
const localtunnel = require('localtunnel'),
dnsTunnel = require('@667/ngrok-dns');
(async () => {
const tunnel = await localtunnel({
port: 3000,
allow_invalid_cert: true,
local_https: true,
debug: true,
});
dnsTunnel(tunnel.url);
console.log(`dnsTunnel: ${tunnel.url}`);
})();
Make sure your env vars are set and run your app or app dev command (i.e. nodemon, etc) as normal:
require('dns')
Log output should look like:
ngrok-dns added Cloudflare TXT your-custom-domain.com -> 0d8b12e869d7.ngrok.io
This is a seperate example of ngrok-dns output:
Currently Cloudflare (token based) is supported although other DNS providers should be easy to add.
FAQs
DNS plugin for ngrok
We found that @667/ngrok-dns demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
A supply chain attack has been detected in versions 1.95.6 and 1.95.7 of the popular @solana/web3.js library.
Research
Security News
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
Security News
Research
Socket researchers have discovered malicious npm packages targeting crypto developers, stealing credentials and wallet data using spyware delivered through typosquats of popular cryptographic libraries.