
Security News
/Research
Wallet-Draining npm Package Impersonates Nodemailer to Hijack Crypto Transactions
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
@digitalscientists/poller
Advanced tools
a fetch and poll reference implementation and maybe module
This is a simple little library that implements a fetch-and-poll procedure.
npm install @digitalscientists/poller
const fetchAndPoll = require("@digitalscientists/poller")
const options = {
url: "https://a-url-that-supports-polling.com/begin",
pollUrl: (id) => `https://a-url-that-supports-polling.com/check/${id}`, // or whatever format
wait: 2000, // how long to wait between polling (optional, defaults to 2 seconds)
timeout: 120000, // how long to wait between polling (optional, defaults to 120 seconds)
payload: {
the: "payload",
for: "the initial POST"
}
}
const response = await fetchAndPoll(options)
Make sure you run the tests before deploying
npm build
npm version patch # or major|minor depending on changes
npm publish
npm i
npm run debug:test
Make sure you have NiM installed in chrome for best results.
You can also run npm link
if ya know what you're doing. This will let you install the local dev version in a separate app. Google that for more info.
npm test
This will run the rollup build process and test the main index.js
file as well as the built lib files agaist a mock server. TODO: still need to test the UMD version, but need a browser env or something for that.
The library currently assumes the following:
{id: "somekindaideitherastringorinteger", status:"queued"}
queued
, done
, and errored
FAQs
a fetch and poll reference implementation and maybe module
We found that @digitalscientists/poller demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 4 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
/Research
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
Security News
This episode explores the hard problem of reachability analysis, from static analysis limits to handling dynamic languages and massive dependency trees.
Security News
/Research
Malicious Nx npm versions stole secrets and wallet info using AI CLI tools; Socket’s AI scanner detected the supply chain attack and flagged the malware.