
Research
2025 Report: Destructive Malware in Open Source Packages
Destructive malware is rising across open source registries, using delays and kill switches to wipe code, break builds, and disrupt CI/CD.
aws-batch-triggering-lambda
Advanced tools
Lambda to trigger AWS Batch Jobs
This Node Lambda is to trigger a job on AWS batch from a Lambda.
This lambda can be triggered by a standard event (from a CloudWatch cron for instance, and a lambda call) , by a kinesis message or by a SNS message.
The lambda expect the following payload:
{
"jobDefinition": "the-job-definition",
"jobQueue": "the-job-queue",
"jobName": "the-job-name",
"parameters": {
"some": "optional parameter"
}
}
This can be transmitted through the event, or an Kinesis/Sns event.
jobDefinition, jobQueue parameters are mandatory.
parameters object is optional.
A jobName would be added based on the following logic :
jobName if such key existjobNamePrefix if defined followed by a date and a random stringjobDefinition otherwise followed by a date and a random stringFor the two last option name would look like this:
test-from-lambda-via-sns--2017-09-21T13-28-55--f6c83928fa175106ea35fd0ff31068e6
The lambda will respond with either an error (and reason why) or a json with the following format:
{
"jobName": "the-job-name",
"jobId": "b3e985b1-e02a-41c9-ac8f-4801e04c9a27-whatever"
}
You can customize the lambda through environment variable to enable or not the supported event Sources:
aws:sns: SNS triggersaws:kinesis: Kinesis triggersTo do so, use either AWS_BATCH_TRIGGER_ENABLE and AWS_BATCH_TRIGGER_DISABLE
that accept a ; separated whitelist/blacklist.
It's also possible to restrict the jobs and/or the queue on which the job can be invocated.
To do so, use the AWS_BATCH_JOB_WHITELIST and AWS_BATCH_QUEUE_WHITELIST which accept
a ; separated list of pattern (without the ^ and $ at the extremities).
(for instance job-queue;staging-.*queue)
FAQs
AWS Batch Triggering Lambda
We found that aws-batch-triggering-lambda demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
Destructive malware is rising across open source registries, using delays and kill switches to wipe code, break builds, and disrupt CI/CD.

Security News
Socket CTO Ahmad Nassri shares practical AI coding techniques, tools, and team workflows, plus what still feels noisy and why shipping remains human-led.

Research
/Security News
A five-month operation turned 27 npm packages into durable hosting for browser-run lures that mimic document-sharing portals and Microsoft sign-in, targeting 25 organizations across manufacturing, industrial automation, plastics, and healthcare for credential theft.