
Research
Security News
Lazarus Strikes npm Again with New Wave of Malicious Packages
The Socket Research Team has discovered six new malicious npm packages linked to North Korea’s Lazarus Group, designed to steal credentials and deploy backdoors.
@outreach/extensibility-sdk
Advanced tools
Welcome to the Outreach Extensibility SDK, a powerful library designed to streamline the development of client extensions for Outreach. If you are looking to enhance your Outreach experience and create custom extensions, this SDK is the ideal starting point. For comprehensive documentation and resources, please visit the Outreach Developer Portal.
To incorporate the Outreach Extensibility SDK into your project, please refer to our detailed guide here.
Given that the Outreach context is exclusive to the Outreach environment, it's imperative to establish a secure connection over the local network for development purposes. For more information please check out our guide for Local Development.
To set up an example project, navigate to the 'examples' folder:
cd ./examples/my-first-outreach-app
Next, install the necessary Node.js modules using Yarn or npm:
yarn
# or
npm install
You need to generate a self-signed SSL certificate or get one from a Certificate Authority (CA). For local development, a self-signed certificate will suffice.
openssl req -x509 -nodes -days 365 -newkey rsa:2048 -keyout localhost.key -out localhost.crt -subj "/CN=extension.outreach-dev.com"
This will create a localhost.key file for your private key and a localhost.cert file for your self-signed certificate, valid for 10 years (3650 days). Remember, browsers will not trust self-signed certificates by default, and you will need to proceed through security warnings or add an exception for your certificate.
The hosts file maps hostnames to IP addresses. On your local machine, add the following code to /etc/hosts:
127.0.0.1 extension.outreach-dev.com
Now extension.outreach-dev.com will resolve to your local machine.
Finally, run the project with the following command:
yarn start
# or
npm start
Upon successful setup of the project, the next step involves registering the application with the Outreach platform. For more information check out Your first extension
Now the example project should be available within your Outreach extension
If you have any questions or require assistance while working with the Outreach Extensibility SDK, please do not hesitate to contact us at platform@outreach.io. Our dedicated support team is here to help you succeed.
FAQs
<!-- omit in toc -->
The npm package @outreach/extensibility-sdk receives a total of 60 weekly downloads. As such, @outreach/extensibility-sdk popularity was classified as not popular.
We found that @outreach/extensibility-sdk demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 3 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
The Socket Research Team has discovered six new malicious npm packages linked to North Korea’s Lazarus Group, designed to steal credentials and deploy backdoors.
Security News
Socket CEO Feross Aboukhadijeh discusses the open web, open source security, and how Socket tackles software supply chain attacks on The Pair Program podcast.
Security News
Opengrep continues building momentum with the alpha release of its Playground tool, demonstrating the project's rapid evolution just two months after its initial launch.