Research
Security News
Threat Actor Exposes Playbook for Exploiting npm to Build Blockchain-Powered Botnets
A threat actor's playbook for exploiting the npm ecosystem was exposed on the dark web, detailing how to build a blockchain-powered botnet.
@evo/cantal-js
Advanced tools
Will collect metrics from your nodejs application
import cantal from '@evo/cantal-js';
const requests = new cantal.Counter({
group: "incoming",
metric: "requests"
});
createServer((req, res) => {
requests.incr();
})
// need to be called somewhere once
cantal.start();
CANTAL_PATH
- path for storing metrics
const requests = new cantal.Counter({
group: "incoming",
metric: "requests"
});
requests.incr();
const memory = new cantal.Integer({
group: "v8-stats",
metric: "malloced_memory"
});
memory.set(stats.memory);
// memory.incr();
// memory.decr();
Some v8 metrics will be collected by default in group v8-stats
new_space_used_size
- heap new space used sizeold_space_used_size
- heap old space used sizecode_space_used_size
- heap code space used sizemap_space_used_size
- heap map space used sizelarge_object_space_used_size
- heap large object space used sizemalloced_memory
- allocated memory for the processDetails for collected metrics here
FAQs
A nodejs library for cantal
We found that @evo/cantal-js demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 12 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
A threat actor's playbook for exploiting the npm ecosystem was exposed on the dark web, detailing how to build a blockchain-powered botnet.
Security News
NVD’s backlog surpasses 20,000 CVEs as analysis slows and NIST announces new system updates to address ongoing delays.
Security News
Research
A malicious npm package disguised as a WhatsApp client is exploiting authentication flows with a remote kill switch to exfiltrate data and destroy files.