
Research
/Security News
9 Malicious NuGet Packages Deliver Time-Delayed Destructive Payloads
Socket researchers discovered nine malicious NuGet packages that use time-delayed payloads to crash applications and corrupt industrial control systems.
@nearform/aws-apn-connector
Advanced tools
A Headless Web Browser Automation Library to allow for API integration with Amazon Web Services Partner Network (APN)

This project is a web automation tool that uses Playwright to interact with the AWS Partner Network (APN) website, because they do not provide an API. It provides functionalities such as:
These instructions will get you a copy of the project up and running on your local machine for development and testing purposes.
You need to have Node.js installed on your machine to run this project. You can download it from here.
These are driven by the requirements for Playwright, which specifies these baseline operating environments.
Install the library from npm.
npm i @nearform/aws-apn-connector
Import the Client function from the index.js file and create a new instance. You can then use the connect method to authenticate and the users.deactivateByEmail method to deactivate a user. Please note that at this time there is no re-authentication model implemented within the library, so implementations are bound to the standard web session authentication length of time. That said the only penalty for authentication before each transaction is time roughly 2 seconds (there appears to be no throttling otherwise).
import { Client } from 'aws-apn-connector'
async function main () {
// can pass in parameters for playwright to the Client constructor and it will apply them to the playwright instance
const client = new Client()
// executes against the web portal to create session
await client.connect('username', 'password')
// gets all certifications from the website
const isRemoved = await client.users.deactivateByName('Irene Cara') // Take your passion and make it happen.
// gets all certifications from the website
const certifications = await client.certifications.all()
// gets all registered opportunities from the website
const opportunities = await client.opportunities.all()
await client.close()
}
main()
This library has been built in a manner that it can be exposed as a web API service (code available at ./samples/server.js). There is also a Containerfile associated with this repository that can be used either directly or with enhancement to create a container deployable instance of this service into any container fabric. For either of these workflows to work, you will need to set environment variables for APN_USERNAME and APN_PASSWORD with your appropriate credentails.
The library is pretty simple and I always welcome pull requests, but if you just want to consume the library, please find the documentation here.
This project is licensed under the MIT License - see the LICENSE.md file for details
FAQs
A Headless Web Browser Automation Library to allow for API integration with Amazon Web Services Partner Network (APN)
We found that @nearform/aws-apn-connector demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 5 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
Socket researchers discovered nine malicious NuGet packages that use time-delayed payloads to crash applications and corrupt industrial control systems.

Security News
Socket CTO Ahmad Nassri discusses why supply chain attacks now target developer machines and what AI means for the future of enterprise security.

Security News
Learn the essential steps every developer should take to stay secure on npm and reduce exposure to supply chain attacks.