
Security News
/Research
Wallet-Draining npm Package Impersonates Nodemailer to Hijack Crypto Transactions
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
@remote.it/socket-link
Advanced tools
socket-link is a powerful SDK and CLI for integrating with the Remote.It socket-link infrastructure. Perfect for setting up a secure one-time connection or developing a complex network application, socket-link simplifies networking.
npm i @remote.it/socket-link
Setting up a socket-link proxy is straightforward:
import {SocketLink} from '@remote.it/socket-link'
const socketLink = new SocketLink()
// Specify the target service and other optional parameters
const proxy = socketLink.connect('MNETSJSW')
// Retrieve the proxy address
const address = proxy.address
// Use the address in your application
// Close the proxy when done
await proxy.close()
Don't have a Remote.It account? Sign up for free. Then, follow these steps to configure your target service:
+
button to add a new device.For more control or specific service integration, socket-link offers advanced configuration options:
const socketLink = new SocketLink({
config: 'path/to/config', // Path to Remote.It config files, defaults to ~/.remoteit
profile: 'MyProfile' // Credential profile name to use, defaults to 'DEFAULT'
})
const proxy = socketLink.connect(
'MNETSJSW', // Service Key, required
{
bind: '127.0.0.1', // Address to bind to, defaults to '127.0.0.1'
port: 2222 // Proxy port, defaults to available port
}
)
// Rest of the usage remains the same
Connections are authenticated using a combination of a Service Key and Credentials. They can be combined in a variety of ways to suit your needs, but one is required for a successful connection.
A Service Key is a unique service level identifier. It can be found in the Remote.It app on the target service details page.
A Credentials file is designed to store account level access keys for an application. You can create and manage your keys in your Remote.It account AccessKeys page.
Creating a basic connection only requires a Service Key
This key provides the authentication and identity needed to connect. Keep it protected and do not commit it to your codebase. It can be revoked at any time and is unique to each service.
MNETSJSW
Generate a key in the Remote.It app on the target service details page.
Credentials can be provided in three ways:
Environment Variables: You can set your Remote.It credentials as environment variables: R3_ACCESS_KEY_ID
and R3_SECRET_ACCESS_KEY
.
Configuration Options: Alternatively, you can provide your credentials as configuration options: keyId
and secret
.
Credentials File: For enhanced security, it is recommended to use the credentials file.
If no credentials are specified, and the default Remote.It credentials file is not found, the connection will remain unauthenticated.
The credential file is designed to store access keys for the Remote.It socket-link service. This structure allows you to define multiple profiles, each with its own set of credentials. You can create and manage your keys in your Remote.It account AccessKeys page.
The file is formatted in the INI style, where each section corresponds to a unique profile.
[ProfileName]
R3_ACCESS_KEY_ID=YourAccessKeyID
R3_SECRET_ACCESS_KEY=YourSecretAccessKey
DEFAULT
will be used or the top level credentials if no default profile
is present.# default credentials
R3_ACCESS_KEY_ID=CKP6FWW5POAKHTZAAKPI
R3_SECRET_ACCESS_KEY=rSfaY4sj07jZV8+GYEjx/PSiln9x9t/8zZbdpgMS
[MyProfile]
# Custom credentials
R3_ACCESS_KEY_ID=J6RBX6GAXLSAIQX6GH3I
R3_SECRET_ACCESS_KEY=2yw6NJA7q6jXdJvDbKBO4j9wi08o/ckR1X8CItUG
Note
Dive deep into the features and configurations in our official documentation.
Run into problems? or have suggestions? Your feedback is invaluable. Open an issue or submit a pull request.
Licensed under MIT. For details, see LICENSE.md.
FAQs
Remote.It socket-link SDK/CLI
We found that @remote.it/socket-link demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 4 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
/Research
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
Security News
This episode explores the hard problem of reachability analysis, from static analysis limits to handling dynamic languages and massive dependency trees.
Security News
/Research
Malicious Nx npm versions stole secrets and wallet info using AI CLI tools; Socket’s AI scanner detected the supply chain attack and flagged the malware.