
Research
Two Malicious Rust Crates Impersonate Popular Logger to Steal Wallet Keys
Socket uncovers malicious Rust crates impersonating fast_log to steal Solana and Ethereum wallet keys from source code.
@datopian/ckan-api-client-js
Advanced tools
Among other JS clients publicly available, the objectives of this one are:
Among other JS clients publicly available, the objectives of this one are:
NOTE: developed mainly to be used on Next.js projects.
Install the package on the project with (or npm link
for local development):
npm i @datopian/ckan-api-client-js
Set the following environment variables on your project:
NEXT_PUBLIC_CKAN_URL=http://ckan.com # <= This should be updated
Import the client with:
import CkanRequest from "ckan-api-client-js";
CkanRequest
exports 2 main methods:
CkanRequest.get("action_name", options)
CkanRequest.post("action_name", options)
options
may have the following properties:
apiKey
- CKAN API key for authorizationheaders
- Request headers. E.g. { "Authorization": "api_token" }
json
- JSON body for POST requests. E.g. { "id": "123" }
formData
- formData for POST requestspackage_show
const dataset = await CkanRequest.get(
"package_show?id=123",
{
apiKey: "my-token"
}
);
package_patch
const dataset = await CkanRequest.post(
"package_patch",
{
headers: {
Authorization: "apikey",
},
json: { "id": "123", "title": "My new title" },
}
);
If an exception happens, simply catch that and show its message to the user. Example:
try {
const dataset = CkanRequest.get("package_show?id=123")
} catch (e) {
alert(e.message) // E.g. "Dataset not found"
}
Currently, npm link
is being used for development purposes.
To do so, simply build (npm run build
) the project and then link it (npm link ...
) on another project to test changes.
FAQs
Among other JS clients publicly available, the objectives of this one are:
We found that @datopian/ckan-api-client-js demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 3 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Socket uncovers malicious Rust crates impersonating fast_log to steal Solana and Ethereum wallet keys from source code.
Research
A malicious package uses a QR code as steganography in an innovative technique.
Research
/Security News
Socket identified 80 fake candidates targeting engineering roles, including suspected North Korean operators, exposing the new reality of hiring as a security function.