
Security News
/Research
Wallet-Draining npm Package Impersonates Nodemailer to Hijack Crypto Transactions
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
@ospin/pusher
Advanced tools
OSPIN package for communcation to the pusher channels of the OSPIN cloud
Documentation can be found here.
@ospin/pusher is a JavaScript SDK to communicate to Ospin's pusher channel for real time information on devices and processes. It is build on top of pusher-js. To use it the user has to be registered at OSPIN.
// connect to the client
const userId = "a3339d89-345b-4baf-9859-46a4542a505a"
pusher.OspinClient.connect({
env: 'prod',
userId,
/* using the default auth methods provided in the @ospin/nexus package */
authDeviceSubscriptions: nexus.user.pusher.subscriptions.device.authorizeMany,
authDeviceProcessSubscriptions: nexus.user.pusher.subscriptions.device.process.authorizeMany,
})
// subscribe
const deviceId = "b3249d89-345b-4baf-9859-46a4542a505a"
const handlers = {
"device-state-update": data => console.log(data)
}
pusher.DevicePusherChannel.subscribe({ deviceId }, handlers)
// unsubscribe
pusher.DevicePusherChannel.unsubscribe({ deviceId })
// disconnect
pusher.OspinClient.disconnect()
This repo employs the github action semantic-release, which, on approved PRs to main
, sniffs the PR title/commit message to automatically bump the semantic versioning and publish the package to NPM.
All PRs to the main
branch should indicate the semantic version change via the following options:
Available types:
Add BREAKING CHANGE into the commit message body (!) to indicate a major version release.
FAQs
OSPIN package for communcation to the pusher channels of the OSPIN cloud
The npm package @ospin/pusher receives a total of 0 weekly downloads. As such, @ospin/pusher popularity was classified as not popular.
We found that @ospin/pusher demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 4 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
/Research
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
Security News
This episode explores the hard problem of reachability analysis, from static analysis limits to handling dynamic languages and massive dependency trees.
Security News
/Research
Malicious Nx npm versions stole secrets and wallet info using AI CLI tools; Socket’s AI scanner detected the supply chain attack and flagged the malware.