
Research
/Security News
TensorLake npm SDK Compromised in ChainDrop Shai-Hulud Credential-Stealing Attack
Tensorlake npm SDK version 0.5.144 was compromised in a ChainDrop / Shai-Hulud attack, delivering credential-stealing malware.
@railhook/node
Advanced tools
Node.js SDK for Railhook. No runtime dependencies.
npm install @railhook/node
import { Railhook } from '@railhook/node';
const client = new Railhook({
apiKey: process.env.RAILHOOK_API_KEY!,
baseUrl: 'https://railhook.io', // default http://localhost:8080
});
const event = await client.events.send(
{ type: 'order.completed', data: { orderId: 'ord_123', amount: 99.99 } },
'order-123-completed', // optional idempotency key
);
console.log(event.eventId, event.deliveriesCreated);
The signature covers the raw body, so read it before any JSON parser does.
import express from 'express';
import { constructEvent } from '@railhook/node';
const app = express();
app.post('/webhooks', express.raw({ type: 'application/json' }), (req, res) => {
try {
const event = constructEvent(req.body.toString(), req.headers, process.env.WEBHOOK_SECRET!);
console.log(event.eventId, event.data);
res.sendStatus(200);
} catch {
res.sendStatus(400);
}
});
verifyStandardWebhook checks the webhook-* headers instead. During a secret rotation
either secret's signature is accepted.
The client also covers endpoints, subscriptions, deliveries, consumers and portal sessions, and incoming sources and events. It does not retry: one call is one HTTP request.
Full docs: https://railhook.io/docs/tools/sdks/
npm install
npm test
npm run build
npm run smoke:live # against a running stack (make up)
MIT
FAQs
Official Node.js SDK for Railhook — reliable webhook infrastructure
The npm package @railhook/node receives a total of 2,242 weekly downloads. As such, @railhook/node popularity was classified as popular.
We found that @railhook/node demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Research
/Security News
Tensorlake npm SDK version 0.5.144 was compromised in a ChainDrop / Shai-Hulud attack, delivering credential-stealing malware.

Research
/Security News
Socket found 16 malicious Firefox extensions designed to steal crypto wallet recovery phrases and private keys using cloned Rabby and OKX interfaces.

Product
Socket now scans VS Code extensions, giving teams early detection of risky behaviors, hidden capabilities, and supply chain threats in developer tools.