
Research
Security News
Lazarus Strikes npm Again with New Wave of Malicious Packages
The Socket Research Team has discovered six new malicious npm packages linked to North Korea’s Lazarus Group, designed to steal credentials and deploy backdoors.
@gorangajic/bull-arena
Advanced tools
An intuitive Web GUI for Bull. Built on Express so you can run Arena standalone, or mounted in another app as middleware.
For a quick introduction to the motivations for creating Arena, read Interactively monitoring Bull, a Redis-backed job queue for Node.
Configure your queues in the "queues" key of index.json
. Queues take the following format:
{
"name": "my_queue",
"port": 6381,
"host": "127.0.0.1",
"hostId": "AWS Server 2"
}
The name
, port
, host
, and hostId
fields are required. hostId
can be given any name, so it is recommended to give it a helpful name for reference. Optionally, you can also pass in db
and password
to configure redis credentials.
To specify a custom file location, see "Running Arena as a node module".
Run npm install
to fetch Arena's dependencies. Then run npm start
to start the server.
Note that because Arena is dependent on async
/await
, Arena only currently supports Node >7
.
Alternatively, you can use Arena as a node module. This has potential benefits:
Usage:
In project folder:
> npm install --save-dev bull-arena
In router.js:
const express = require('express');
const router = express.Router();
const arena = require('bull-arena')({queues});
router.use('/', arena);
Arena is written using Express, with simple jQuery and Handlebars on the front end.
If updating dependencies, please use Yarn and update the yarn.lock
file before submitting a pull request.
The MIT License.
FAQs
Dashboard for the Bull worker queue
The npm package @gorangajic/bull-arena receives a total of 0 weekly downloads. As such, @gorangajic/bull-arena popularity was classified as not popular.
We found that @gorangajic/bull-arena demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
The Socket Research Team has discovered six new malicious npm packages linked to North Korea’s Lazarus Group, designed to steal credentials and deploy backdoors.
Security News
Socket CEO Feross Aboukhadijeh discusses the open web, open source security, and how Socket tackles software supply chain attacks on The Pair Program podcast.
Security News
Opengrep continues building momentum with the alpha release of its Playground tool, demonstrating the project's rapid evolution just two months after its initial launch.