
Research
PyPI Package Disguised as Instagram Growth Tool Harvests User Credentials
A deceptive PyPI package posing as an Instagram growth tool collects user credentials and sends them to third-party bot services.
@risingstack/anchor
Advanced tools
Backups Kubernetes resources as a Helm chart.
Extract configurations from resources and save them as values and templates in a reproducible Helm chart.
>= v6
npm install @risingstack/anchor
For more detailed examples like sub-charts check out the ./example
folder.
const anchor = require('@risingstack/anchor')
anchor.snapshot({
resources: [
'deployment/my-app',
'deployment/my-worker'
]
})
.then(() => console.log('Snapshot finished'))
.catch((err) => console.error('Snapshot error', err))
Backup Kubernetes resources as a Helm chart and returns a Promise
.
options.resources
: Kubernetes resources to snapshot
['deployment/my-app', 'deployment/my-worker']
options.namespace
: Kubernetes namespace for kubectl
default
options.name
: name of the Helm chart
my-chart
options.description
: description of the Helm chart
''
options.version
: version of the Helm chart
0.0.1
options.overwrite
: overwrite output directory
false
options.outputPath
: defines chart path, throws error when exist but overwrite is false
./output
kubectl
values.yaml
TODO:
The ./output
directory will contains the templates under the ./output/templates
folder.
Your Values.yaml
file will look like the following:
deploymentMyApp:
image: my-company/my-app
imageTag: 1f40c1f
envLogLevel: info
resourcesLimitsCPU: 150m
resourcesLimitsMemory: 1536Mi
resourcesRequestsCPU: 10m
resourcesRequestsMemory: 128Mi
replicas: 2
deploymentMyWorker:
containers:
myWorker:
image: my-company/my-worker
imageTag: 295a9c2
envLogLevel: warning
envTraceServiceName: my-worker
resourcesLimitsCPU: 200m
resourcesLimitsMemory: 1536Mi
resourcesRequestsCPU: 20m
resourcesRequestsMemory: 128Mi
mySidecar:
image: my-company/metrics-exporter
imageTag: aa1c434
replicas: 2
FAQs
Creates Helm charts from Kubernetes resources.
The npm package @risingstack/anchor receives a total of 0 weekly downloads. As such, @risingstack/anchor popularity was classified as not popular.
We found that @risingstack/anchor demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 4 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
A deceptive PyPI package posing as an Instagram growth tool collects user credentials and sends them to third-party bot services.
Product
Socket now supports pylock.toml, enabling secure, reproducible Python builds with advanced scanning and full alignment with PEP 751's new standard.
Security News
Research
Socket uncovered two npm packages that register hidden HTTP endpoints to delete all files on command.