
Research
/Security News
10 npm Typosquatted Packages Deploy Multi-Stage Credential Harvester
Socket researchers found 10 typosquatted npm packages that auto-run on install, show fake CAPTCHAs, fingerprint by IP, and deploy a credential stealer.
@azure/arm-consumption
Advanced tools
This package contains an isomorphic SDK (runs both in Node.js and in browsers) for Azure ConsumptionManagement client.
Consumption management client provides access to consumption resources for Azure Enterprise Subscriptions.
Source code | Package (NPM) | API reference documentation | Samples
See our support policy for more details.
@azure/arm-consumption packageInstall the Azure ConsumptionManagement client library for JavaScript with npm:
npm install @azure/arm-consumption
ConsumptionManagementClientTo create a client object to access the Azure ConsumptionManagement API, you will need the endpoint of your Azure ConsumptionManagement resource and a credential. The Azure ConsumptionManagement client can use Azure Active Directory credentials to authenticate.
You can find the endpoint for your Azure ConsumptionManagement resource in the Azure Portal.
You can authenticate with Azure Active Directory using a credential from the @azure/identity library or an existing AAD Token.
To use the DefaultAzureCredential provider shown below, or other credential providers provided with the Azure SDK, please install the @azure/identity package:
npm install @azure/identity
You will also need to register a new AAD application and grant access to Azure ConsumptionManagement by assigning the suitable role to your service principal (note: roles such as "Owner" will not grant the necessary permissions).
Set the values of the client ID, tenant ID, and client secret of the AAD application as environment variables: AZURE_CLIENT_ID, AZURE_TENANT_ID, AZURE_CLIENT_SECRET.
For more information about how to create an Azure AD Application check out this guide.
Using Node.js and Node-like environments, you can use the DefaultAzureCredential class to authenticate the client.
import { ConsumptionManagementClient } from "@azure/arm-consumption";
import { DefaultAzureCredential } from "@azure/identity";
const subscriptionId = "00000000-0000-0000-0000-000000000000";
const client = new ConsumptionManagementClient(new DefaultAzureCredential(), subscriptionId);
For browser environments, use the InteractiveBrowserCredential from the @azure/identity package to authenticate.
import { InteractiveBrowserCredential } from "@azure/identity";
import { ConsumptionManagementClient } from "@azure/arm-consumption";
const subscriptionId = "00000000-0000-0000-0000-000000000000";
const credential = new InteractiveBrowserCredential({
tenantId: "<YOUR_TENANT_ID>",
clientId: "<YOUR_CLIENT_ID>",
});
const client = new ConsumptionManagementClient(credential, subscriptionId);
To use this client library in the browser, first you need to use a bundler. For details on how to do this, please refer to our bundling documentation.
ConsumptionManagementClient is the primary interface for developers using the Azure ConsumptionManagement client library. Explore the methods on this client object to understand the different features of the Azure ConsumptionManagement service that you can access.
Enabling logging may help uncover useful information about failures. In order to see a log of HTTP requests and responses, set the AZURE_LOG_LEVEL environment variable to info. Alternatively, logging can be enabled at runtime by calling setLogLevel in the @azure/logger:
import { setLogLevel } from "@azure/logger";
setLogLevel("info");
For more detailed instructions on how to enable logs, you can look at the @azure/logger package docs.
Please take a look at the samples directory for detailed examples on how to use this library.
If you'd like to contribute to this library, please read the contributing guide to learn more about how to build and test the code.
FAQs
A generated SDK for ConsumptionManagementClient.
The npm package @azure/arm-consumption receives a total of 2,304 weekly downloads. As such, @azure/arm-consumption popularity was classified as popular.
We found that @azure/arm-consumption demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 4 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
Socket researchers found 10 typosquatted npm packages that auto-run on install, show fake CAPTCHAs, fingerprint by IP, and deploy a credential stealer.

Product
Socket Firewall Enterprise is now available with flexible deployment, configurable policies, and expanded language support.

Security News
Open source dashboard CNAPulse tracks CVE Numbering Authorities’ publishing activity, highlighting trends and transparency across the CVE ecosystem.