
Security News
/Research
Wallet-Draining npm Package Impersonates Nodemailer to Hijack Crypto Transactions
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
@headlamp-k8s/backstage-plugin-headlamp
Advanced tools
The Headlamp plugin for Backstage embeds the Headlamp UI within your Backstage instance using an iframe. The plugin can be used in two modes:
The Headlamp plugin for Backstage embeds the Headlamp UI within your Backstage instance using an iframe. The plugin can be used in two modes:
Standalone Mode:
app-config.yaml
headlamp.url
parameterBackend Integration Mode:
app-config.yaml
for interoperability with the backstage kubernetes pluginThe Headlamp plugin is configured by setting the headlamp.url
in the app-config.yaml
file.
yarn --cwd packages/app add @headlamp-k8s/backstage-plugin-headlamp
packages/app/src/App.tsx
Add the following import
import { HeadlampPage } from '@headlamp-k8s/backstage-plugin-headlamp';
Add the following route to the const routes
const routes = [
<FlatRoutes>
...
<Route path="/headlamp" element={<HeadlampPage />} />
</FlatRoutes>
]
Add the following import to packages/app/src/components/Root/Root.tsx
import { HeadlampIcon } from '@headlamp-k8s/backstage-plugin-headlamp';
Add the SidebarItem within any SidebarGroup in your Root component:
export const Root = ({ children }: PropsWithChildren<{}>) => (
<SidebarPage>
<Sidebar>
<SidebarItem icon={HeadlampIcon} to="headlamp" text="Headlamp" />
{/* ... other items ... */}
</Sidebar>
{children}
</SidebarPage>
);
If you are deploying the Headlamp backend plugin ie using the backend integration mode, you can configure the url of the Headlamp instance by setting the headlamp.url
parameter in the app-config.yaml
file.
example:
headlamp:
url: https://headlamp.example.com
FAQs
The Headlamp plugin for Backstage embeds the Headlamp UI within your Backstage instance using an iframe. The plugin can be used in two modes:
The npm package @headlamp-k8s/backstage-plugin-headlamp receives a total of 22 weekly downloads. As such, @headlamp-k8s/backstage-plugin-headlamp popularity was classified as not popular.
We found that @headlamp-k8s/backstage-plugin-headlamp demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
/Research
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
Security News
This episode explores the hard problem of reachability analysis, from static analysis limits to handling dynamic languages and massive dependency trees.
Security News
/Research
Malicious Nx npm versions stole secrets and wallet info using AI CLI tools; Socket’s AI scanner detected the supply chain attack and flagged the malware.