
Research
Shai-Hulud Descends to Hades: Miasma Worm Campaign Spreads with New PyPI Wave
Socket found 37 malicious PyPI wheels that abuse Python startup hooks to launch a Bun-powered credential stealer tied to Mini Shai-Hulud/Miasma.
@macpaw/qa-http-request-builder
Advanced tools
This package is built on around of various libraries for HTTP requests:
12.6.1[!WARNING] This package is native ESM and no longer provides a CommonJS export. If your project uses CommonJS, you'll have to convert to ESM or use the dynamic import() function.
npm i -D @macpaw/qa-http-request-builder
For API requests, override the httpRequest() method in your BaseService and choice library:
export interface HttpRequestParams {
token?: string;
cookies?: string[];
appURL?: string;
}
// Got HTTP lib
class BaseService {
protected params?: HttpRequestParams;
constructor(params?: HttpRequestParams) {
this.params = params;
}
httpRequest() {
const service = OuterApiService.useGot(this.params);
return service.httpRequest();
}
}
// Playwright HTTP lib
export interface HttpRequestParams {
token?: string;
cookies?: Cookies[];
appURL?: string;
}
class BaseService {
protected params?: HttpRequestParams;
constructor(params?: HttpRequestParams) {
this.params = params;
}
httpRequest() {
const service = OuterApiService.usePLaywright(this.params);
return service.httpRequest();
}
}
git clone git@github.com:MacPaw/qa-http-request-builder.git
Init local env variables
# copy configuration
cp .env.example .env
To use the API gorest for testing need to add AUTH_KEY in .env. Token can find in the 1password. If the token expired you can generate a new one after registration in gorest
The testing example you can find in the project directory /example.
Use the script to run tests:
npm run test:example
Our library release process is designed to ensure quality, consistency, and proper versioning. The process is broken down into multiple stages to ensure every change is tracked, reviewed, and integrated appropriately. We use changesets for version and release management.
Whenever you introduce a new change, run the command:
You have to do this at least once per branch with some changes.
npm run changes:add
chore: update changesets.Steps to make a release:
develop to release with the title Release.release branch.After a successful release, ensure you create a backmerge pull request from main to develop. This ensures that the develop branch stays up-to-date with the latest versions and changes.
FAQs
Wrapper around the HTTP request library Got
The npm package @macpaw/qa-http-request-builder receives a total of 0 weekly downloads. As such, @macpaw/qa-http-request-builder popularity was classified as not popular.
We found that @macpaw/qa-http-request-builder demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
Socket found 37 malicious PyPI wheels that abuse Python startup hooks to launch a Bun-powered credential stealer tied to Mini Shai-Hulud/Miasma.

Security News
RubyGems and Bundler 4.0.13 introduced an opt-in cooldown feature that delays newly published gems during dependency resolution.

Security News
pnpm 11.5 now recognizes npm staged publish approvals in release metadata, preventing those releases from being mistaken for lower-trust package publishes.