
Security News
/Research
Wallet-Draining npm Package Impersonates Nodemailer to Hijack Crypto Transactions
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
anyfetch-hydrater
Advanced tools
Base library for hydration on http://anyfetch.com.
This library allows you to create a hydrater server from a single function. Taking an optional file path and initial data, it should return improved or augmented data.
To understand the role of "hydraters", read the dedicated documentation page.
In path/to/my/function.js
:
'use strict';
/**
* Hydration function, to add metadata to the document
*
* @param {String} filePath Path to the file from which hydrate, downloaded for you on the filesystem (or null if no file)
* @param {Object} document Data currently known (from previous hydraters, or from providers). Always includes `document_type`, `metadata`, `data` and `actions` keys.
* @param {Object} changes Convenience object provided with empty keys `document_type`, `metadata`, `data` and `actions`. Add your changes in there.
* @param {Function} cb(err, changes) Call this with an error if any, or pass your changes as second parameter.
*/
module.exports = function myHydrationFunction(path, document, changes, cb)
// Extract interesting stuff from the file or the document...
// Improve the document...
cb(err, changes);
};
And then:
'use strict';
var anyfetchHydrater = require('anyfetch-hydrater');
var config = {
'hydrater_function': 'absolute/path/to/my/function.js',
'appName': 'Name of your application that will be used in the redis queue',
'redisUrl': 'Url of the redis server. If it is not set, it will use localhost on the default port'
};
var hydrationServer = anyfetchHydrater.createServer(config);
hydrationServer.listen(8000);
You're all set! Your server is running on port 8000.
Access /hydrate
with a standard AnyFetch POST
request to start hydrating your file.
POST <your_hydrater_server_url>/hydrate
{
file_path: <url-file-to-hydrate>
callback: <url-to-ping>
document: {base document}
}
In some cases, you may want to bypass the lib and send the result yourself. The property
cb.callbackUrl
tells you where to send the data back to the client. After having sent the data, callcb(null, null)
without any error or document. This will finalize hydration, clean the file and start the next task.
createServer()
takes an object hash for argument. hydrater_function
is mandatory, optional values includes:
concurrency
: max number of simultaneous calls to your hydrater function (default: 1). One child process per concurrency will spawn.opbeat
: an object used for opbeat notifications. It must have organizationId
, appId
and secretToken
keys.You may use require('anyfetch-hydrater').HydrationError
as a special error to inform the hydration was unable to complete, and should not be tried again:
var myHydrationFunction = function(filePath, document, cb) {
// Do stuff with the file or the document...
cb(new anyfetchHydrater.HydrationError("Corrupted file"));
};
For other (transient) errors, use standard Error
objects.
TIMEOUT
in ms. Time to hydrate a file. After this, the process will stop the file hydration and the next file will be hydrated. Default: 60 sec.FAQs
Create hydrater for AnyFetch.
The npm package anyfetch-hydrater receives a total of 16 weekly downloads. As such, anyfetch-hydrater popularity was classified as not popular.
We found that anyfetch-hydrater demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 3 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
/Research
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
Security News
This episode explores the hard problem of reachability analysis, from static analysis limits to handling dynamic languages and massive dependency trees.
Security News
/Research
Malicious Nx npm versions stole secrets and wallet info using AI CLI tools; Socket’s AI scanner detected the supply chain attack and flagged the malware.