
Research
Malicious npm Packages Impersonate Flashbots SDKs, Targeting Ethereum Wallet Credentials
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
@gcp-tools/cdktf
Advanced tools
Reusable CDKTF Stack and Construct Patterns for GCP Applications
While you can use this library as is, it has been designed to be used with gcp-tools-core; an AI-enabled platform to scaffold, build and deploy robust GCP applications.
gcp-tools-cdktf is a TypeScript library providing a comprehensive set of Cloud Development Kit for Terraform (CDKTF) stack and construct patterns for Google Cloud Platform (GCP). It enables you to rapidly compose, configure, and deploy production-grade GCP infrastructure as code.
Stacks (src/stacks/
):
Constructs (src/constructs/
):
Utilities (src/utils/
):
iac/
├── projects/ # Project management stacks (host, data, app projects)
├── infra/ # Core infrastructure (networking, IAM, databases, etc.)
├── app/ # Application-level services and stacks
├── ingress/ # Load balancers, API gateways, and ingress resources
For a full example project structure, see gcp-tools-example-app.
import { cloudrun } from '@gcp-tools/cdktf/constructs'
import { AppStack } from '@gcp-tools/cdktf/stacks/app'
import { envConfig } from '@gcp-tools/cdktf/utils'
import { type App, TerraformOutput } from 'cdktf'
export class JobsStack extends AppStack {
public readonly apiService: cloudrun.CloudRunServiceConstruct
constructor(scope: App) {
super(scope, 'jobs', {
databases: ['firestore'],
})
this.apiService = new cloudrun.CloudRunServiceConstruct(
this,
'api',
{
region: envConfig.regions[0],
buildConfig: {},
serviceConfig: {
environmentVariables: {
FIRESTORE_PROJECT_ID: this.firestoreDatabaseProjectId,
NODE_ENV: 'production',
},
},
},
)
}
}
FAQs
GCP Tools | project | infrastructure
We found that @gcp-tools/cdktf demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
Security News
Ruby maintainers from Bundler and rbenv teams are building rv to bring Python uv's speed and unified tooling approach to Ruby development.
Security News
Following last week’s supply chain attack, Nx published findings on the GitHub Actions exploit and moved npm publishing to Trusted Publishers.