
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
@toss/sentry
Advanced tools
A Sentry module that can be used in both the browser and Node.js.
import { Sentry } from '@toss/sentry';
Sentry.init(...);
Sentry.captureException(...);
@toss/sentry.@toss/sentry/nextjs.Generally speaking, @sentry/node is created for Node.js servers and uses various Node.js APIs. In contrast, @sentry/browser is built for browsers and uses various browser APIs.
While the APIs look the same, the internal implementation is different, so you'll need to use the appropriate package for each platform.
Using Import conditions, @toss/sentry will return @sentry/node for the server if used on the server, or @sentry/browser for the browser if used on the browser. This makes it easy to use platform-specific Sentry without having to branch the import.
When using @toss/sentry in a browser, it relies on Sentry's Lazy-loading feature.
If you use @toss/sentry where there is no lazy loading script, you will get an error, so be sure to add one.
You can test with the @toss/sentry/testing module.
import Sentry from '@toss/sentry';
import { useFakeSentry } from '@toss/sentry/testing';
import waitFor from 'wait-for-expect';
beforeAll(() => {
useFakeSentry();
});
describe('Sentry는', () => {
beforeEach(() => {
Sentry.init({
dsn: FAKE_DSN,
});
});
it('captureException할 수 있다.', async () => {
await Sentry.captureException(new Error('hello'));
await waitFor(() => {
expect(sentryServer.reports()).toHaveLength(1);
});
});
});
FAQs
Unknown package
The npm package @toss/sentry receives a total of 5 weekly downloads. As such, @toss/sentry popularity was classified as not popular.
We found that @toss/sentry demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 5 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.