
Research
Security News
Lazarus Strikes npm Again with New Wave of Malicious Packages
The Socket Research Team has discovered six new malicious npm packages linked to North Korea’s Lazarus Group, designed to steal credentials and deploy backdoors.
@api3/airnode-deployer
Advanced tools
Airnode deployment CLI and its docker image
You can find documentation on how to use the deployer in the deployer docs.
The rest of the README contains instructions on how to build and use the deployer CLI. However, the intended way to run the deployer for users is using the deployer docker image.
terraform
binary is
available in your PATH
# Run from the root
yarn build
config.json
and secrets.env
are available in the config
directory. You can use the provided example
config.json
and secrets.env
templates to get started quickly, but you will need to edit these with your own API
details and secrets.# From this package (/packages/airnode-deployer)
cp config/config.json.example config/config.json
cp config/secrets.env.example config/secrets.env
# Edit both `config.json` and `secrets.env` to reflect your configuration
config.json
and secrets.env
ready. Then, use the deploy
command to trigger your first
deployment.config.json
filedeploy
command againremove
command to remove the Airnode deployment. Use the -r
option to provide the receipt file from the
latest deployment.Deploys an Airnode instance using the `config.json` and `secrets.env` files. This can be used for a new deployment or to update an existing deployment.
Options:
--version Show version number [boolean]
--debug Run in debug mode [boolean] [default: false]
--help Show help [boolean]
-c, --configuration, --config, --conf Path to configuration file [string] [default: "config/config.json"]
-s, --secrets Path to secrets file [string] [default: "config/secrets.env"]
-r, --receipt Output path for receipt file [string] [default: "output/receipt.json"]
--interactive Run in interactive mode [boolean] [default: true]
Removes a deployed Airnode instance
Options:
--version Show version number [boolean]
--debug Run in debug mode [boolean] [default: false]
--help Show help [boolean]
-r, --receipt Path to receipt file [string]
-a, --airnodeAddressShort Airnode address (short version) [string]
-s, --stage Stage (environment) [string]
-c, --cloudProvider Cloud provider [string]
-e, --region Region [string]
FAQs
> A CLI tool to automate Airnode deployment
The npm package @api3/airnode-deployer receives a total of 79 weekly downloads. As such, @api3/airnode-deployer popularity was classified as not popular.
We found that @api3/airnode-deployer demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
The Socket Research Team has discovered six new malicious npm packages linked to North Korea’s Lazarus Group, designed to steal credentials and deploy backdoors.
Security News
Socket CEO Feross Aboukhadijeh discusses the open web, open source security, and how Socket tackles software supply chain attacks on The Pair Program podcast.
Security News
Opengrep continues building momentum with the alpha release of its Playground tool, demonstrating the project's rapid evolution just two months after its initial launch.