Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
@bss-sbc/shopify-api-fetcher
Advanced tools
From: BSS Group > BSS Commerce > Division Shopify/Blockchain
BucketManager
: Manage Token bucket rate limiter of active store
initializeAll: (activeStores: Shop[]) => number;
: Initialize rate limiter for all given stores
initializeOne: (domain: string) => TokenBucketRateLimiter
: Initialize rate limiter for specific domain
get: (domain: string) => TokenBucketRateLimiter
: Get initialized rate limiter of a specific domain
clear: (domain: string) => void
: Clear rate limiter of a specific domain, used when app is uninstalled
safeFetch: (domain: string, url: RequestInfo, params?: RequestInit) => Promise<Response>
: use this instead of normal fetch
, with additional parameter domain
, which specify a store.
// To bulk initialize
const shops = [
{ id: 1, domain: 'dev-mida-dean.myshopify.com' },
{ id: 2, domain: 'dev-mida-store.myshopify.com' },
]
const intialized = BucketManager.initializeAll(shops);
// To initialize
BucketManager.initializeOne({
id: 1,
domain: 'dev-mida-dean.myshopify.com',
});
// To get specific bucket
const bucket = BucketManager.get('dev-mida-dean.myshopify.com');
// To clean up specific bucket
BucketManager.clear('dev-mida-dean.myshopify.com');
// Auto initialize bucket,
// using safeFetch
const response = await safeFetch(domain, url, params);
Because of numbers of services
, it is difficult to listen to app/uninstalled
webhook event. So, auto clear bucket is necessary
FAQs
README.md
The npm package @bss-sbc/shopify-api-fetcher receives a total of 23 weekly downloads. As such, @bss-sbc/shopify-api-fetcher popularity was classified as not popular.
We found that @bss-sbc/shopify-api-fetcher demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 3 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.