
Research
PyPI Package Impersonates SymPy to Deliver Cryptomining Malware
Malicious PyPI package sympy-dev targets SymPy users, a Python symbolic math library with 85 million monthly downloads.
@serverless/aws-lambda-sdk
Advanced tools
Instruments AWS Lambda functions and propagates traces to the Serverless Console
Resolve Layer ARN with following steps
@serverless/aws-lambda-sdk at https://github.com/serverless/console/releasessls-sdk-node.json asset, find ARN of a layer in a region in which function is deployedSLS_ORG_ID: (id of your organization in Serverless Console)AWS_LAMBDA_EXEC_WRAPPER: /opt/sls-sdk-node/exec-wrapper.shserverlessSdk global variableEnsure @serverless/aws-lambda-sdk dependency installed for the function
Decorate function handler:
CJS:
const instrument = require('@serverless/aws-lambda-sdk/instrument');
module.exports.handler = instrument(
(event, context, callback) => {
/* Original handler logic */
},
options // Optional, see documentation below
);
ESM:
import instrument from '@serverless/aws-lambda-sdk/instrument';
export const handler = instrument(
(event, context, callback) => {
/* Original handler logic */
},
options // Optional, see documentation below
);
@serverless/aws-lambda-sdkExtension can be configured either via environment variables, or in case of manual instrumentation by passing the options object to instrument function;
If given setting is set via both environment variable and property in options object, the environment variable takes precedence.
SLS_ORG_ID (or options.orgId)Required setting. Id of your organization in Serverless Console.
SLS_DISABLE_HTTP_MONITORING (or options.disableHttpMonitoring)Disable tracing of HTTP and HTTPS requests
SLS_DISABLE_REQUEST_RESPONSE_MONITORING (or options.disableRequestResponseMonitoring)(Dev mode only) Disable monitoring requests and reponses (function, AWS SDK requests and HTTP(S) requests)
SLS_DISABLE_AWS_SDK_MONITORING (or options.disableAwsSdkMonitoring)Disable automated AWS SDK monitoring
SLS_DISABLE_EXPRESS_MONITORING (or options.disableExpressMonitoring)Disable automated express monitoring
SLS_TRACE_MAX_CAPTURED_BODY_SIZE_KB (or options.traceMaxCapturedBodySizeKb)In dev mode, HTTP request and response bodies are stored as tags. To avoid performance issues, bodies that extend 10 000KB in size are not exposed. This default can be overridden with this settin
SDK automatically creates the trace that covers internal process of function invocation and initialization.
For details check:
FAQs
## AWS Lambda [Serverless Console](https://www.serverless.com/console) SDK
The npm package @serverless/aws-lambda-sdk receives a total of 87 weekly downloads. As such, @serverless/aws-lambda-sdk popularity was classified as not popular.
We found that @serverless/aws-lambda-sdk demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 3 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
Malicious PyPI package sympy-dev targets SymPy users, a Python symbolic math library with 85 million monthly downloads.

Product
Create and share saved alert views with custom tabs on the org alerts page, making it easier for teams to return to consistent, named filter sets.

Product
Socket’s Rust and Cargo support is now generally available, providing dependency analysis and supply chain visibility for Rust projects.