
Research
Malicious npm Packages Impersonate Flashbots SDKs, Targeting Ethereum Wallet Credentials
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
@oroinc/autobahnjs
Advanced tools
AutobahnJS is a JavaScript client library that implements The WebSocket Application Messaging Protocol (WAMP)
AutobahnJS is a JavaScript client library that implements The WebSocket Application Messaging Protocol (WAMP):
You can link to the latest prebuilt AutobahnJS release hosted on Amazon S3 here
WebSocket is already built into modern browsers and provides bidirectional low-latency messaging.
However, as such, it is quite low-level. Web apps often have a need for higher level messaging patterns:
This is where WAMP enters. WAMP runs on top of raw WebSocket and provides asynchronous RPC and PubSub.
Technically, WAMP is a proper WebSocket subprotocol that uses JSON as message serialization format. WAMP was designed to be easy to use and simple to implement.
AutobahnJS implements WAMP in JavaScript to be used in browser based applications.
ExtJS Extension
AutobahnExtJS provides and Autobahn/WAMP proxy and support code for Sencha ExtJS. Please see the autobahnextjs
folder for code and more information.
For more information, including getting started, tutorials and reference documentation, please visit the project's homepage.
Get in touch on IRC #autobahn on chat.freenode.net or join the mailing list.
AutobahnJS includes code from the following open-source projects
Special thanks to the Coders with an Unhealthy Javascript Obsession for creating when.js - A lightweight Promise and when() implementation, plus other async goodies.
Building AutobahnJS will create a single file, minimized version of the library.
To build, you will need
SCons is a Python based build tool, so you will need Python as well.
Set environment variables:
JAVA_HOME pointing to your Java run-time, e.g.
C:\Program Files\Java\jre7
adding Python & Python scripts to PATH, e.g.
C:\Python27;C:\Python27\Scripts;
JS_COMPILER pointing to the Google Closure compiler.jar
C:\Program Files\Google Closure\compiler.jar
Now clone the repo:
git clone git://github.com/tavendo/AutobahnJS.git
You need to include the submodules (i.e. currenlty when.js):
cd AutobahnJS
git submodule init
and then update them
git submodule update
Updating CryptoJS needs to be done manually, since they are not on Git.
For a release version, set the appropriate AutobahnJS version in 'version.txt', e.g
vi version.txt
Scons currently needs to be run from the Windows shell, so open one, go to the AutobahnJS directory, and run
scons
This will produce 2 files
build/autobahn.js
build/autobahn.min.js
To clean up your build
scons -uc
Tavendo provides hosting of AutobahnJS on Amazon S3 at:
https://autobahn.s3.amazonaws.com/js/
Set AWS credentials in $HOME/.boto
(or C:\Users\johndoe\.boto
for Windows):
[Credentials]
aws_access_key_id = ABCDEFGHJIKLMNOPQRTUVXYZ
aws_secret_access_key = 0123456789ABCDEFGHJIKLMNOPQRTUVXYZ
You will also need Boto installed:
easy_install boto
To publish, then do
scons publish
FAQs
AutobahnJS is a JavaScript client library that implements The WebSocket Application Messaging Protocol (WAMP)
We found that @oroinc/autobahnjs demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 3 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
Security News
Ruby maintainers from Bundler and rbenv teams are building rv to bring Python uv's speed and unified tooling approach to Ruby development.
Security News
Following last week’s supply chain attack, Nx published findings on the GitHub Actions exploit and moved npm publishing to Trusted Publishers.