
Security News
/Research
Wallet-Draining npm Package Impersonates Nodemailer to Hijack Crypto Transactions
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
api-integrations-logging
Advanced tools
This repository contains the backend API which is responsible for creating tokens for partner providers to push their logs to Grafana Loki instance, checking the heartbeats of deployments, and performing other operational tasks. The API provides a simple
This repository contains the backend API which is responsible for creating tokens for partner providers to push their logs to Grafana Loki instance, checking the heartbeats of deployments, and performing other operational tasks. The API provides a simple and secure way for partner providers to access the API3 log service, and ensures that deployments are running smoothly. To get started, see the "Getting Started" section below.
.env
from the example.env
file..env
file and update the environment variables:
TOKEN_REQUEST_MESSAGE
: Message that is expected to be signed by frontendGF_CLOUD_REGION
: Region of the utilizied Grafana Cloud instanceGF_CLOUD_TOKEN
: Grafana Cloud token that is enabled to generate token and read logsGF_CLOUD_ACCESS_POLICY_ID
: Policy to be used while generating token, expected to write-only logs (logs:write)GF_LOKI_USER
: Grafana Loki user able to use endpoint GF_LOKI_ENDPOINT
GF_LOKI_ENDPOINT
: Grafana Loki HTTP API endpointTo deploy infrastructure to AWS:
pnpm deploy --region us-east-2 --stage dev
To remove deployment:
pnpm removeDeployment --region us-east-2 --stage dev
This service is publicly accessible at the following endpoint:
The API provides the following endpoints:
POST /generateToken
: Get token to push logs.GET /deploymentStatus
: Get status for the deployment.Start local dynamodb server:
pnpm dynamodb-local-up
Initialize tables:
pnpm init-tables
Spin up local express
server to mimic AWS API gateway:
pnpm start-local
You can use following valid examples in the next section to test server.
# Upsert batch of signed data (HTTP POST)
curl -L -X POST "https://integration.nodary.io/generateToken" -H "Content-Type: application/json" -H "X-API-KEY: exampleUser:exampleApiKey" -d "{\"airnode\":\"0x6CFec029322bfb6f8f6a5A6662b4A3136eeD83A7\"}"
# Response will be:
# {
# "airnode": "0x6CFec029322bfb6f8f6a5A6662b4A3136eeD83A7",
# "lokiEndpoint": "logs-prod-012.grafana.net",
# "lokiToken": "glc_somelokiWV1LXQtoken==",
# "lokiUser": "123456"
# }
airnode-feed
with airnode address 0x6CFec029322bfb6f8f6a5A6662b4A3136eeD83A7
curl --location 'localhost:8090/deploymentStatus?airnode=0x6CFec029322bfb6f8f6a5A6662b4A3136eeD83A7&app=airnode-feed'
FAQs
This repository contains the backend API which is responsible for creating tokens for partner providers to push their logs to Grafana Loki instance, checking the heartbeats of deployments, and performing other operational tasks. The API provides a simple
The npm package api-integrations-logging receives a total of 0 weekly downloads. As such, api-integrations-logging popularity was classified as not popular.
We found that api-integrations-logging demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
/Research
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
Security News
This episode explores the hard problem of reachability analysis, from static analysis limits to handling dynamic languages and massive dependency trees.
Security News
/Research
Malicious Nx npm versions stole secrets and wallet info using AI CLI tools; Socket’s AI scanner detected the supply chain attack and flagged the malware.