
Research
Two Malicious Rust Crates Impersonate Popular Logger to Steal Wallet Keys
Socket uncovers malicious Rust crates impersonating fast_log to steal Solana and Ethereum wallet keys from source code.
@igloosoftware/ig-proxy
Advanced tools
A simple proxy harness that proxies local requests to a Digital Workplace and handles authentication and authorization.
You or a member of your team will need to obtain an appId
and appPass
) value from Igloo Customer Support.
You will need administration access to the digital workplace that you will be testing on.
npm i @igloosoftware/ig-proxy
Create a proxy-config.json
(or similarly named) file with your Digital Workplace credentials.
Remember to never commit this file.
{
"appId": "The AppID provided by Igloo Support",
"appPass": "The AppPass provided by Igloo Support",
"username": "yourEmail@domain.com",
"password": "yourSecurePassword",
"dwpDomain": "my-dpw-url.igloocommunities.com",
"authVersion": "AUTH_VERSION"
}
Note the URL in dwpDomain
should not include the scheme (https://). authVersion
is always going to default to v2 unless specified otherwise in your config.
The most basic usage you can provide a config object or path to your proxy-config
require('@igloosoftware/ig-proxy')('./proxy-config.json');
// or more explicitly
const startProxy = require('@igloosoftware/ig-proxy');
startProxy('./proxy-config.json');
You can also create a proxy instance as part of a larger development harness.
const igProxy = require('@igloosoftware/ig-proxy');
async function start() {
const config = await igProxy({
appId: '...',
appPass: '...',
username: '...',
password: '...',
dwpDomain: '...',
authVersion: '1',
keepAliveSec: 60,
});
console.log(`Igloo proxy sever listening on ${config.port}`);
}
// start your harness and proxy
start();
FAQs
Igloo API/Resource Proxy server
The npm package @igloosoftware/ig-proxy receives a total of 21 weekly downloads. As such, @igloosoftware/ig-proxy popularity was classified as not popular.
We found that @igloosoftware/ig-proxy demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 6 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Socket uncovers malicious Rust crates impersonating fast_log to steal Solana and Ethereum wallet keys from source code.
Research
A malicious package uses a QR code as steganography in an innovative technique.
Research
/Security News
Socket identified 80 fake candidates targeting engineering roles, including suspected North Korean operators, exposing the new reality of hiring as a security function.