
Research
Two Malicious Rust Crates Impersonate Popular Logger to Steal Wallet Keys
Socket uncovers malicious Rust crates impersonating fast_log to steal Solana and Ethereum wallet keys from source code.
@jkilzi/backstage-plugin-orchestrator-swf-editor-envelope
Advanced tools
Serverless workflow editor envelope for the Orchestrator plugin
This package includes assets that are meant to be served as a single page application.
This package has no entrypoint, therefore it is not suitable to be consumed as a library.
The Orchestrator plugin uses these assets when it renders the Serverless Workflow editor by injecting an iframe
that loads this application.
Serve the files inside this package's dist
directory using the @janus-idp/backstage-plugin-orchestrator-backend
static files endpoint (files under plugins/orchestrator-backend/static/*
are served statically) or, for testing purposes, you can also serve the files directly with:
yarn dlx serve \
--port 8080 \
--cors \
--debug \
node_modules/@janus-idp/backstage-plugin-orchestrator-swf-editor-envelope/dist
Add this configuration to the app-config.yaml
:
backend:
csp:
frame-ancestors: ['http://localhost:3000', 'http://localhost:7007']
script-src: ["'self'", "'unsafe-inline'", "'unsafe-eval'"]
script-src-elem: ["'self'", "'unsafe-inline'", "'unsafe-eval'"]
connect-src: ["'self'", 'http:', 'https:', 'data:']
orchestrator:
editor:
path: http://localhost:7007/api/orchestrator/static/generated/envelope
Here we assume the app and backend packages are running on the default address and port during local development.
FAQs
Serverless workflow editor envelope for the Orchestrator plugin
We found that @jkilzi/backstage-plugin-orchestrator-swf-editor-envelope demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Socket uncovers malicious Rust crates impersonating fast_log to steal Solana and Ethereum wallet keys from source code.
Research
A malicious package uses a QR code as steganography in an innovative technique.
Research
/Security News
Socket identified 80 fake candidates targeting engineering roles, including suspected North Korean operators, exposing the new reality of hiring as a security function.