
Research
Malicious npm Packages Impersonate Flashbots SDKs, Targeting Ethereum Wallet Credentials
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
@buzuli/changes-stream
Advanced tools
A fault tolerant changes stream with builtin retry HEAVILY inspired by
follow
. This module is a Readable
Stream with all of
the fun stream methods that you would expect.
npm install changes-stream --save
So changes-stream
can take a fair bit of options in order so that you can
fully customize your _changes
request. They include the following:
{
db: 'http://localhost:5984/my_db', // full database URL
feed: 'continuous', // Can also be longpoll technically but not currently implemented
filter: 'docs/whatever', // Can be a defined couchdb view, a local filter function or an array of IDs
inactivity_ms: 60 * 60 * 1000, // time allow inactivity before retrying request
timeout: undefined, // How long couchdb should wait for a change to show up before closing the feed. in milliseconds
requestTimeout: 2 * 60 * 1000, // http timeout
agent: undefined, // http agent
since: 0, // update sequence to start from, 'now' will start it from latest
heartbeat: 30 * 1000, // how often we want couchdb to send us a heartbeat message
style: 'main_only', // specifies how many revisions returned all_docs would return leaf revs
include_docs: false, // whether or not we want to return the full document as a property
query_params: {}, // custom arbitrary params to send in request e.g. { hello: 'world' }
use_post: false // switch the default HTTP method to POST (cannot be used with a filter array)
}
const ChangesStream = require('changes-stream');
const changes = new ChangesStream('http://localhost:5984/my_database');
changes.on('readable', () => {
const change = changes.read();
});
FAQs
Stream changes from CouchDB via the /_changes api
The npm package @buzuli/changes-stream receives a total of 2 weekly downloads. As such, @buzuli/changes-stream popularity was classified as not popular.
We found that @buzuli/changes-stream demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
Security News
Ruby maintainers from Bundler and rbenv teams are building rv to bring Python uv's speed and unified tooling approach to Ruby development.
Security News
Following last week’s supply chain attack, Nx published findings on the GitHub Actions exploit and moved npm publishing to Trusted Publishers.