
Research
Malicious npm Packages Impersonate Flashbots SDKs, Targeting Ethereum Wallet Credentials
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
@dcos/connections
Advanced tools
👩🔬 Please be aware that this package is still experimental — changes to the interface and underlying implementation are likely, and future development or maintenance is not guaranteed.
This package provides different connection types with a unified interface.
The following example will create an XHRConnection, add a complete event
listener and open the connection. The complete listener will get called once
the JSON file is loaded and the connection is closed.
import { XHRConnection, ConnectionEvent } from "@dcos/connections";
const connection = new XHRConnection("http://example.com/file.json");
connection.addListener(ConnectionEvent.COMPLETE, (event) => console.log(event));
connection.open();
The AbstractConnection provides the default properties, methods, states, and
event-definitions to implement a custom connection.
The ConnectionEvent provides a common interface for all different event types.
Use the following event types...
OPEN when opening the connectionDATA every time data is received from the serverERROR when an error occurredCOMPLETE when the connection closes without any errorsABORT when the connection was aborted by somethingThe event target always points to the connection.
The XHRConnection wraps the native XMLHttpRequest to provide a unified and
easy to use interface.
The following example will create an XHRConnection to post "data" to an
API server.
const connection = new XHRConnection("http://example.com/api", {
method: "POST",
body: "data"
});
connection.open();
This defines the resource location that you want to connect to.
An optional object containing custom settings that you want to apply to the connection.
headers: Any headers you want to add to your requestmethod: The request method (default: "GET")body: Any data you want send with your requestresponseType: The response type you expect (default: "json") If the server returns data that is not compatible the value of response will be null.| Value | Data type of response property |
|---|---|
| "arraybuffer" | ArrayBuffer |
| "blob" | Blob |
| "document" | Document |
| "json" | JavaScript object, parsed from a JSON string returned by the server |
| "text" | DOMString |
FAQs
Provides different connection types with a unified interface
The npm package @dcos/connections receives a total of 88 weekly downloads. As such, @dcos/connections popularity was classified as not popular.
We found that @dcos/connections demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 13 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.

Security News
Ruby maintainers from Bundler and rbenv teams are building rv to bring Python uv's speed and unified tooling approach to Ruby development.

Security News
Following last week’s supply chain attack, Nx published findings on the GitHub Actions exploit and moved npm publishing to Trusted Publishers.