
Research
Two Malicious Rust Crates Impersonate Popular Logger to Steal Wallet Keys
Socket uncovers malicious Rust crates impersonating fast_log to steal Solana and Ethereum wallet keys from source code.
@aerogear/graphql-kafka-subscriptions
Advanced tools
It implements the PubSubEngine Interface from the graphql-subscriptions package and also the new AsyncIterator interface. It allows you to connect your subscriptions manager to a single Kafka topic used as Pub/Sub communication channel.
npm install graphql-kafka-subscriptions
OpenSSL has been upgraded in High Sierra and homebrew does not overwrite default system libraries. That means when building node-rdkafka, because you are using openssl, you need to tell the linker where to find it:
export CPPFLAGS=-I/usr/local/opt/openssl/include
export LDFLAGS=-L/usr/local/opt/openssl/lib
Then you can run npm install
on your application to get it to build correctly.
import { KafkaPubSub } from 'graphql-kafka-subscriptions'
export const pubsub = new KafkaPubSub({
topic: 'name-of-the-topic',
host: 'INSERT_KAFKA_IP',
port: 'INSERT_KAFKA_PORT',
globalConfig: {} // options passed directly to the consumer and producer
})
payload = {
firstName: "John",
lastName: "Doe"
}
pubsub.publish('pubSubChannel', payload);
const onMessage = (payload) => {
console.log(payload);
}
const subscription = await pubsub.subscribe('pubSubChannel', onMessage)
Contributions are welcome. Make sure to check the existing issues (including the closed ones) before requesting a feature, reporting a bug or opening a pull requests.
For sending a PR follow:
git checkout -b my-new-feature
)git commit -am 'Add some feature'
)git push origin my-new-feature
)Horia Miron notes:
Thanks to davidyaha for graphql-redis-subscriptions which was the main inspiration point for this project.
FAQs
Apollo graphql subscription over Kafka protocol
We found that @aerogear/graphql-kafka-subscriptions demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 8 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Socket uncovers malicious Rust crates impersonating fast_log to steal Solana and Ethereum wallet keys from source code.
Research
A malicious package uses a QR code as steganography in an innovative technique.
Research
/Security News
Socket identified 80 fake candidates targeting engineering roles, including suspected North Korean operators, exposing the new reality of hiring as a security function.