
Security News
/Research
Wallet-Draining npm Package Impersonates Nodemailer to Hijack Crypto Transactions
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
@lifeomic/bitrise
Advanced tools
A simple API client for the Bitrise API.
$ npm install --save @lifeomic/bitrise
Create a new client instance. token
is a personal access token.
const bitrise = require('@lifeomic/bitrise');
const client = bitrise({ token: 'some-token' });
Create an app object. slug
is the Bitrise app slug.
const bitrise = require('@lifeomic/bitrise');
const app = bitrise({ token }).app({ slug });
An app has the following attributes:
Trigger a new build for the app. Supported options
include the following:
master
.branch
parameter is used.Returns a build
object representing the build that was started. A build has
the following attributes:
References:
Abort the build. If supplied the reason
string will be included in the build
details.
References:
Get all attributes for a build.
References:
Poll on the logs for a build and print them to stdout. An error will be thrown
if the build fails. interval
is the polling interval in milliseconds
(default value is 5000
). heartbeat
is the maximum interval that no output
can be received in milliseconds. When this value is supplied a heartbeat message
will be printed if no output has been received. When it is not supplied nothing
is printed unless output is received from the build.
References:
Returns true
if the build has completed execution (regardless of success or
failure). Returns false
otherwise. This is just a convenience method for
running build.describe()
and checking the finished_at
attribute.
References:
FAQs
Bitrise API client
The npm package @lifeomic/bitrise receives a total of 60 weekly downloads. As such, @lifeomic/bitrise popularity was classified as not popular.
We found that @lifeomic/bitrise demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
/Research
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
Security News
This episode explores the hard problem of reachability analysis, from static analysis limits to handling dynamic languages and massive dependency trees.
Security News
/Research
Malicious Nx npm versions stole secrets and wallet info using AI CLI tools; Socket’s AI scanner detected the supply chain attack and flagged the malware.