
Research
npm Malware Targets Telegram Bot Developers with Persistent SSH Backdoors
Malicious npm packages posing as Telegram bot libraries install SSH backdoors and exfiltrate data from Linux developer machines.
API Tests Using n3 Rules
Follow platform-specific instructions to install locally oor in a docker image.
To run api-tuner
in GitHub workflow, you add this action to your jobs:
- uses: fabasoad/setup-prolog-action@v1
curl 7.83+
npm i api-tuner
> api-tuner --help
Usage: api-tuner [options] <path>...
Options:
--lib <path> Specify rules to include in all tests
--silent Less output
--debug Enable debug output
--raw Output raw results from eye
--base-iri <iri> Specify the base IRI for parsing the test case files
--version Show version information
--help Show this help message
Create a test case file test.n3
:
# test.n3
PREFIX : <http://example.com/>
PREFIX earl: <http://www.w3.org/ns/earl#>
PREFIX tuner: <https://api-tuner.described.at/>
PREFIX rdfs: <http://www.w3.org/2000/01/rdf-schema#>
PREFIX log: <http://www.w3.org/2000/10/swap/log#>
PREFIX string: <http://www.w3.org/2000/10/swap/string#>
<#getExampleDotCom>
a earl:TestCase ;
rdfs:label "Simple GET test" ;
.
# Configure a request
_:req
a tuner:Request ;
tuner:url <http://localhost:1080/example.com> ;
tuner:method "GET" ;
.
{
# Execute the request and capture its response
_:req tuner:response ?res .
# Check the response status code and content type
?res tuner:http_code 200 ;
tuner:header ( "content-type" "text/html" ) ;
.
# Check the body contains the work "Example"
?res!tuner:body string:contains "Example Domain" .
} => {
# Use te EARL vocabulary to assert the test passed
<#getExampleDotCom> earl:outcome earl:passed .
} .
Execute the test case:
api-tuner test.n3
TBD
FAQs
**API** **T**ests **U**sing **n3** **R**ules
The npm package api-tuner receives a total of 0 weekly downloads. As such, api-tuner popularity was classified as not popular.
We found that api-tuner demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Malicious npm packages posing as Telegram bot libraries install SSH backdoors and exfiltrate data from Linux developer machines.
Security News
pip, PDM, pip-audit, and the packaging library are already adding support for Python’s new lock file format.
Product
Socket's Go support is now generally available, bringing automatic scanning and deep code analysis to all users with Go projects.