Research
Security News
Threat Actor Exposes Playbook for Exploiting npm to Build Blockchain-Powered Botnets
A threat actor's playbook for exploiting the npm ecosystem was exposed on the dark web, detailing how to build a blockchain-powered botnet.
@webex/webex-core
Advanced tools
Core library for the Cisco Webex JS SDK.
Defines the plugin system, storage system, common http behaviors, credentials, services, and basic logging.
npm install --save @webex/webex-core
To utilize the basic functionality of the services
plugin that is bound to the webex-core
plugin upon initialization, the following scopes must be present in the provided client's scopes:
spark:all
The following environment variables are used by this plugin:
HYDRA_SERVICE_URL
- Stores the public hydra api url for managing Webex resources.U2C_SERVICE_URL
- Stores the service catalog collecting url, typically the U2C service.The services
plugin that is bound to the webex-core
plugin upon initialization supports the ability to inject discovery urls via the constructor:
const webex = new Webex({
config: {
services: {
// Services that are available before catalog retrieval.
discovery: {
hydra: 'https://api.ciscospark.com/v1'
},
// Services that have a persistant host, typically for testing.
override: {
serviceName: 'https://api.service.com/v1'
}
// Validate domains against the allowed domains.
validateDomains: true,
// The allowed domains to validate domains against.
allowedDomains: ['allowed-domain']
}
}
});
The default configuration includes the following service urls:
U2C_SERVICE_URL
[ U2C ] - https://u2c.wbx2.com/u2c/api/v1
HYDRA_SERVICE_URL
[ Hydra ] - https://api.ciscospark.com/v1
This package is maintained by Cisco Webex for Developers.
Pull requests welcome. Please see CONTRIBUTING.md for more details.
© 2016-2020 Cisco and/or its affiliates. All Rights Reserved.
FAQs
Plugin handling for Cisco Webex
The npm package @webex/webex-core receives a total of 8,655 weekly downloads. As such, @webex/webex-core popularity was classified as popular.
We found that @webex/webex-core demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
A threat actor's playbook for exploiting the npm ecosystem was exposed on the dark web, detailing how to build a blockchain-powered botnet.
Security News
NVD’s backlog surpasses 20,000 CVEs as analysis slows and NIST announces new system updates to address ongoing delays.
Security News
Research
A malicious npm package disguised as a WhatsApp client is exploiting authentication flows with a remote kill switch to exfiltrate data and destroy files.