
Security News
/Research
Wallet-Draining npm Package Impersonates Nodemailer to Hijack Crypto Transactions
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
@bkwld/lightkeeper
Advanced tools
Averages multiple successive Lighthouse tests to arrive at a more accurate PageSpeed score
Averages multiple successive Lighthouse tests to arrive at a more accurate PageSpeed score.
$ npm install --global @bkwld/lightkeeper
$ lightkeeper https://yourdomain.com
The results will be something like this:
Mobile Results
┌─────┬───────┬───────┬───────┬───────┬───────┬───────┬───────┐
│ │ Score │ FCP │ SI │ LCP │ TTI │ TBT │ CLS │
├─────┼───────┼───────┼───────┼───────┼───────┼───────┼───────┤
│ #1 │ 57 │ 3.8s │ 5s │ 6.2s │ 5.6s │ 328ms │ 0 │
├─────┼───────┼───────┼───────┼───────┼───────┼───────┼───────┤
│ #2 │ 66 │ 2.5s │ 3.5s │ 5.5s │ 5.2s │ 406ms │ 0.005 │
├─────┼───────┼───────┼───────┼───────┼───────┼───────┼───────┤
│ #3 │ 70 │ 2.5s │ 3.5s │ 5.4s │ 5s │ 307ms │ 0 │
├─────┼───────┼───────┼───────┼───────┼───────┼───────┼───────┤
│ AVG │ 64.3 │ 2.9s │ 4s │ 5.7s │ 5.3s │ 347ms │ 0.002 │
├─────┼───────┼───────┼───────┼───────┼───────┼───────┼───────┤
│ SD │ 5.4 │ 646ms │ 719ms │ 354ms │ 263ms │ 42ms │ 0.002 │
└─────┴───────┴───────┴───────┴───────┴───────┴───────┴───────┘
The summary rows (which can be exclusive returned with the -s
option) contain the following rows:
AVG
- The statistical meanSD
- The standard deviationFrom lightkeeper --help
:
ARGUMENTS
<url> The URL to test
OPTIONS
-b, --block <urls> Comma seperated URLs to block, wildcards allowed
-d, --desktop Test only desktop
-m, --mobile Test only mobile
-s, --summary Only show summary rows
-t, --times <count> The number of tests to run
default: 10
For example:
lightkeeper https://www.bukwild.com
- Runs 10 desktop and 10 mobile testslightkeeper https://www.bukwild.com -m -t=30 -b=googletagmanager
- Runs 30 mobile tests while blocking Google Tag Managerlightkeeper https://www.bukwild.com -ms -t=100 && say "All done"
- Runs 100 mobile tests and only show the summary at the end. And says "All done" aloud on a Mac.FAQs
Averages multiple successive Lighthouse tests to arrive at a more accurate PageSpeed score
We found that @bkwld/lightkeeper demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 7 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
/Research
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
Security News
This episode explores the hard problem of reachability analysis, from static analysis limits to handling dynamic languages and massive dependency trees.
Security News
/Research
Malicious Nx npm versions stole secrets and wallet info using AI CLI tools; Socket’s AI scanner detected the supply chain attack and flagged the malware.