
Research
Malicious npm Packages Impersonate Flashbots SDKs, Targeting Ethereum Wallet Credentials
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
@serverless/sdk
Advanced tools
Environment agnostic Serverless Console instrumentation functions for Node.js applications.
This library is safe to use without side-effects in any Node.js applications. It becomes effective once (one of the listed below) environment specific SDK is loaded on top.
npm install @serverless/sdk
CJS:
const serverlessSdk = require('@serverless/sdk');
// ...
serverlessSdk.captureError(new Error('Unexpected'));
ESM:
import serverlessSdk from '@serverless/sdk';
// ...
serverlessSdk.captureError(new Error('Unexpected'));
Common options supported by all environments:
SLS_ORG_ID
(or options.orgId
)Required setting. Id of your organization in Serverless Console.
SLS_DISABLE_HTTP_MONITORING
(or options.disableHttpMonitoring
)Disable tracing of HTTP and HTTPS requests. See HTTP instrumentation
SLS_DISABLE_REQUEST_RESPONSE_MONITORING
(or options.disableRequestResponseMonitoring
)(Dev mode only) Disable monitoring requests and reponses (function, AWS SDK requests and HTTP(S) requests)
SLS_DISABLE_EXPRESS_MONITORING
(or options.disableExpressMonitoring
)Disable automated express monitoring. See express app instrumentation
SLS_DISABLE_CAPTURED_EVENTS_STDOUT
(or options.disableCapturedEventsStdout
)Disable writing captured events registered via .captureError
and .captureWarning
to stdout
This package comes with instrumentation for following areas.
Note: instrumentation is enabled via environment specific SDK instance, relying just on @serverless/sdk
doesn't enable any instrumentation)
FAQs
## [Serverless Console](https://www.serverless.com/console) SDK
The npm package @serverless/sdk receives a total of 328 weekly downloads. As such, @serverless/sdk popularity was classified as not popular.
We found that @serverless/sdk demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 3 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
Security News
Ruby maintainers from Bundler and rbenv teams are building rv to bring Python uv's speed and unified tooling approach to Ruby development.
Security News
Following last week’s supply chain attack, Nx published findings on the GitHub Actions exploit and moved npm publishing to Trusted Publishers.