Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
@opendoor/cloudworker
Advanced tools
Note: This does not address the issue from https://github.com/dollarshaveclub/cloudworker/pull/81 but our tests run with the simple replacement
Cloudworker allows you to run Cloudflare Worker scripts locally.
Install via NPM:
npm install -g @dollarshaveclub/cloudworker
const Cloudworker = require('@dollarshaveclub/cloudworker')
const simpleScript = `addEventListener('fetch', event => {
event.respondWith(new Response('hello', {status: 200}))
})`
const req = new Cloudworker.Request('https://myfancywebsite.com/someurl')
const cw = new Cloudworker(simpleScript)
cw.dispatch(req).then((res) => {
console.log("Response Status: ", res.status)
res.text().then((body) =>{
console.log("Response Body: ", body)
})
})
Usage: cloudworker [options] <file>
Options:
-p, --port <port> Port (default: 3000)
-d, --debug Debug
-s, --kv-set [variable.key=value] Binds variable to a local implementation of Workers KV and sets key to value (default: [])
-f, --kv-file [variable=path] Set the filepath for value peristence for the local implementation of Workers KV (default: [])
-w, --wasm [variable=path] Binds variable to wasm located at path (default: [])
-c, --enable-cache Enables cache <BETA>
-r, --watch Watch the worker script and restart the worker when changes are detected
-h, --help output usage information
cloudworker example/example.js
curl localhost:3000/
cloudworker --debug example/example.js
curl localhost:3000/
cloudworker --debug --kv-set KeyValueStore.key=value --kv-set KeyValueStore.hello=world example/example-kv.js
curl localhost:3000/
cloudworker --debug --kv-file KeyValueStore=kv.json --kv-set KeyValueStore.key=value --kv-set KeyValueStore.hello=world example/example-kv.js
curl localhost:3000/
cloudworker --debug --wasm Wasm=example/simple.wasm example/example-wasm-simple.js
curl localhost:3000/
cloudworker --debug --wasm isqrt=example/isqrt.wasm example/example-wasm-isqrt.js
curl localhost:3000/?num=9
cloudworker --debug --wasm RESIZER_WASM=example/resizer.wasm example/example-wasm-resizer.js
curl localhost:3000/wasm-demo/dogdrone.png?width=210 # or open in browser
Cloudworker strives to be as similar to the Cloudflare Worker runtime as possible. A script should behave the same when executed by Cloudworker and when run within Cloudflare Workers. Please file an issue for scenarios in which Cloudworker behaves differently. As behavior differences are found, this package will be updated to match the Cloudflare Worker runtime. This may result in breakage if scripts depended on those behavior differences.
For beta releases:
v[version]-beta
. e.g. v0.0.10-beta
npm version [version]-beta.[beta number]
. e.g npm version 0.0.10-beta.1
npm publish --tag beta
.npm version
, write relevant release notes, and ensure "This is a pre-release" is checked.For production releases:
npm version [version]
. e.g. npm version 0.0.10
npm publish
.npm version
and copy release notes from beta.MIT
FAQs
node.js runner for Cloudflare Workers
The npm package @opendoor/cloudworker receives a total of 33 weekly downloads. As such, @opendoor/cloudworker popularity was classified as not popular.
We found that @opendoor/cloudworker demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 73 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.