
Security News
/Research
Wallet-Draining npm Package Impersonates Nodemailer to Hijack Crypto Transactions
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
@hume/monit-express
Advanced tools
[Express.js](http://expressjs.com) analytics for friends, based on [Elastic](https://www.elastic.co) and [Kibana](https://www.elastic.co/products/kibana). The idea is to monitor the API since the first moment with a quick setup, instead of having to defin
Express.js analytics for friends, based on Elastic and Kibana. The idea is to monitor the API since the first moment with a quick setup, instead of having to define anything in advance (ie: traits).
Apart from the provided dashboards, anyone can build new custom ones using that stored info. Error reporting is also supported, to relate them with the requests data we have.
:coffee:
npm i --save @hume/monit-express
Use your own deployments. If you need a quick way of setup Kibana to give it a try you could use this repo.
To avoid replacing the active dashboard the default one is available here but not loaded. So you need to import it manually.
:rocket: Please visit the tests to see a full example.
monit.init(uri, opts)
-> PromiseThe middleware setup expects:
uri
(string) - The Elastic URI to connect to.opts
(object) - DB optional values:
trace
(boolean) - To enable Elastic tracing. (default: false)indexRequests
(string) - Name of the Elastic index to store the requests info. (default: "api-requests-MM-DD-YYY")indexErrors
(string) - Name of the Elastic index to store the errors info. (default: "api-errors-MM-DD-YYY")app
(string) - App name to monitor, needed to classify by app in Elastic. A field with "keyword" type will be added in all errors and express requests. (default: "app")monit.error(message, error, opts)
-> PromiseTo track the errors, ie: uncaughException, unhandledPromise. The middleware setup expects:
message
(string) - Custom error message.error
(object) - JavaScript Error
object.opts
(object) - Optional values:
userId
(string) - User identifier to trace the error.monit.express(opts)
-> functionTo track the Express requests info. The middleware expects to receive the next parameters. Please visit the tests for more details.
opts
(object) - Optional values:
only
(string / array) - To store only the requests through this subpath. (default: null)allHeaders
(boolean) - To include all the user headers. (default: false)hideBody
(object) - To avoid to store sensitive data in the DB from a "body". (default: {})
path
(string) - The substring of the path to exlude stuff (ie: "login"). If it's not defined but the others do all paths will be hidden.field
(string) - Name of the object field to exclude (ie: "password"). Same here, if it's not defined but the others do all the body content will be hidden.fun
(async / function) - Custom function to hide all the content of specific requests. It should return a boolean (true
for hide) and receives de Express request object as parameter. In this case it's defined the other two options are ignored.NOTES:
Apart from the ones included by Express you can attach to the req
the user ID to allow tracing:
userId
(string) - User identifier.Example here.
In the same wat, to support the duration
field (ms.) you need to attach the "response-time" middleware before with the option "suffix" set to false. Please notice that it should be the first one to get more accurate results. Example here.
:sunglasses: If you want to help please check this file.
FAQs
[Express.js](http://expressjs.com) analytics for friends, based on [Elastic](https://www.elastic.co) and [Kibana](https://www.elastic.co/products/kibana). The idea is to monitor the API since the first moment with a quick setup, instead of having to defin
We found that @hume/monit-express demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
/Research
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
Security News
This episode explores the hard problem of reachability analysis, from static analysis limits to handling dynamic languages and massive dependency trees.
Security News
/Research
Malicious Nx npm versions stole secrets and wallet info using AI CLI tools; Socket’s AI scanner detected the supply chain attack and flagged the malware.