
Security News
/Research
Wallet-Draining npm Package Impersonates Nodemailer to Hijack Crypto Transactions
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
@zxyf/ztrack
Advanced tools
蝉衣可视化回溯系统由青岛中正合力软件有限公司自主研发,具有回溯内容全面、有效、全程自带追溯码、防篡改、回溯记录易查阅的特点。
同时,本系统接入简单、数据量小,非常适用于保险、金融领域的交易全过程回溯。
npm install @zxyf/ztrack
或
yarn add @zxyf/ztrack
// 引入录制库
import ZTrackRecorder from '@zxyf/ztrack';
// 初始化参数
const params = {
autoStart: true // 是否自动开始
};
// 通过构造函数实例化后再执行初始化
const recorder = new ZTrackRecorder();
recorder.init(params).then(() => {
console.log('录制初始化成功,开始录制');
});
// 初始化成功后可以通过recorder.bizUuid 获取当前bizUuid
// bizUuid 也可以放到params中作为初始化参数
// 如果初始化参数 autoStart 为true,则无需调用
recorder.start().then(() =>{
console.log('开始录制');
});
// 添加的业务节点可以在回溯视频中直接查看,业务节点KEY值、名称可以在后台进行设置
recorder.addBizNode('VIEW_NOTICE').then(() =>{
console.log('添加“查看须知”业务节点');
}); // 添加业务节点,可以通过 recorder.bizNodes 获取,非必须
// 停止录制,停止录制后继续调用 recorder.start() 可以继续录制
recorder.stop().then(() => {
console.log('录制停止');
});
// 完成录制,表示业务已完成,后续不可继续录制
recorder.finish().then(() => {
console.log('录制完成');
});
初始化成功后可以通过recorder.bizUuid 获取当前bizUuid,
回溯完成后可以通过以下链接查看,其中XXXX是录制时传入的bizUuid
https://dev.helisoft.cn/ztrack-simple-player/?bizUuid=XXXX
蝉衣回溯配备了管理后台,我们以vant组件库进行回溯测试,模拟添加业务节点后,实际播放效果如下:
备注:
请勿在正式环境直接使用,商用请联系商务人员:
18513565468 李经理 17664051807 耿经理
FAQs
zxyf web page track service
We found that @zxyf/ztrack demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
/Research
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
Security News
This episode explores the hard problem of reachability analysis, from static analysis limits to handling dynamic languages and massive dependency trees.
Security News
/Research
Malicious Nx npm versions stole secrets and wallet info using AI CLI tools; Socket’s AI scanner detected the supply chain attack and flagged the malware.