
Security News
/Research
Wallet-Draining npm Package Impersonates Nodemailer to Hijack Crypto Transactions
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
@atomictech/httpie
Advanced tools
A modern and light Node.js http client 🐢🚀.
The package is inspired by lukeed httpie (The use is relatively similar). This package use new Node.js http client undici under the hood.
This fork is an opinionated version of handling request body, especially JSON ones, and that allow to properly delegate all other body types to undici
(like FormData
bodies, for example, that was not properly handled).
json(bodyObj)
call) and responses.get
, post
, put
, patch
, and del
.p-ratelimit
with the limit
option.Thanks to undici:
maxRedirections
argument.Light with seriously maintained dependencies:
This package is available in the Node Package Repository and can be easily installed with npm or yarn.
$ npm i @atomictech/httpie
# or
$ yarn add @atomictech/httpie
The MyUnisoft httpie client is very similar to lukeed httpie http client.
import * as httpie from "@atomictech/httpie";
try {
const { data } = await httpie.get("https://jsonplaceholder.typicode.com/posts");
console.log(data);
const response = await httpie.post("https://jsonplaceholder.typicode.com/posts", {
body: httpie.json({
title: "foo",
body: "bar",
userId: 1
})
});
console.log(response.statusCode);
console.log(response.statusMessage);
console.log(response.data);
}
catch (error) {
console.log(error.message);
console.log(error.statusCode);
console.log(error.headers);
console.log(error.data);
}
👀 For more examples of use please look at the root folder examples.
Thanks goes to these wonderful people (emoji key):
Gentilhomme 💻 📖 👀 🛡️ 🐛 |
MIT
FAQs
Fork of MyUnisoft Node.js HTTP client that use Undici client
We found that @atomictech/httpie demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 3 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
/Research
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
Security News
This episode explores the hard problem of reachability analysis, from static analysis limits to handling dynamic languages and massive dependency trees.
Security News
/Research
Malicious Nx npm versions stole secrets and wallet info using AI CLI tools; Socket’s AI scanner detected the supply chain attack and flagged the malware.