
Research
/Security News
DuckDB npm Account Compromised in Continuing Supply Chain Attack
Ongoing npm supply chain attack spreads to DuckDB: multiple packages compromised with the same wallet-drainer malware.
@krakenjs/express-promisified
Advanced tools
Express with promises
.crt
and .key
in the app using this moduleopenssl genrsa 2048 > localhost.key
chmod 400 localhost.key
openssl req -new -x509 -nodes -sha256 -days 365 -key localhost.key -out localhost.crt
enter
through all fieldsCountry Name (2 letter code) []:
State or Province Name (full name) []:
Locality Name (eg, city) []:
Organization Name (eg, company) []:
Organizational Unit Name (eg, section) []:
Common Name (eg, fully qualified host name) []:
Email Address []:
listenHTTPS
you will need to pass the cert and keyimport fs from 'fs';
// const fs = require(fs);
...
const port = process.env.PORT
? parseInt(process.env.PORT, 10)
: 8443;
const privateKey = fs.readFileSync('./creds/localhost.key');
const certificate = fs.readFileSync('./creds/localhost.crt');
...
server.listenHTTPS({ port, privateKey, certificate })
FAQs
Express with promises
The npm package @krakenjs/express-promisified receives a total of 0 weekly downloads. As such, @krakenjs/express-promisified popularity was classified as not popular.
We found that @krakenjs/express-promisified demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 7 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
/Security News
Ongoing npm supply chain attack spreads to DuckDB: multiple packages compromised with the same wallet-drainer malware.
Security News
The MCP Steering Committee has launched the official MCP Registry in preview, a central hub for discovering and publishing MCP servers.
Product
Socket’s new Pull Request Stories give security teams clear visibility into dependency risks and outcomes across scanned pull requests.