
Research
Malicious npm Packages Impersonate Flashbots SDKs, Targeting Ethereum Wallet Credentials
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
@morgan-stanley/message-broker
Advanced tools
Framework agnostic messagebroker for decoupled communication.
MessageBroker provides framework agnostic, decoupled communication between publishers and subscribers. This library is fully type safe and works in both browsers and Node.js. MessageBroker is built ontop of RxJS providing access to observables and a comprehensive list of operators.
Full documentation can be found at https://morganstanley.github.io/message-broker/
First, install the message-broker
npm install @morgan-stanley/message-broker
then you can start sending and receiving messages like this
import { messagebroker, IMessageBroker } from '@morgan-stanley/message-broker';
interface IContracts {
myChannel: {
payload: string;
};
}
const broker: IMessageBroker<IContracts> = messagebroker<IContracts>();
broker.get('myChannel').subscribe((message) => {
console.log(message.payload);
});
broker.create('myChannel').publish({
payload: 'My first message using the MessageBroker!',
});
For guidelines on how to contribute please click here. Here are a list of commands to run if you are interested in developing or contributing to the project.
npm install // Install all package dependencies.
npm run test // Run tests on the command line.
npm run watch-test // Run tests in watch mode.
npm run lint // Checks the code for lint errors.
npm run build // Run a simple build.
npm run watch-build // Run build in watch mode.
npm run build-release // Run a full build (Compile, Tests, Lint).
FAQs
Framework agnostic messagebroker for decoupled communication.
We found that @morgan-stanley/message-broker demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
Security News
Ruby maintainers from Bundler and rbenv teams are building rv to bring Python uv's speed and unified tooling approach to Ruby development.
Security News
Following last week’s supply chain attack, Nx published findings on the GitHub Actions exploit and moved npm publishing to Trusted Publishers.