Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
aws-mjml-csv
Advanced tools
CLI and programatic API to send emails using MJML (that is then parsed by Handlebars.js), populating your email passing the CSV columns to your template
CLI and programatic API to send emails using MJML (that is then parsed by Handlebars.js), populating your email passing the CSV columns to your template. Will try to throttle according to your current limits.
Sending email using an interface is great if you don't know what you're doing. You have a nice WYSIWYG interface, some drag'n'drop widgets, and a shiny file manager. Emails this way are ok, but usually you'll want something more solid, giving your designer to use MJML instead, using Handlebars inside your MJML template, and create a nice professional responsive look and "feels like home" emails crafted to customers. For that templating capabilities you'll have to resort to paid services, like Mailchimp or Sendgrid, using their templating language. This is a really cost effective alternative (plus 62k free emails per month on AWS).
Pass as many variables that are important using CSV, slap in a template using .mjml
file, and you're ready to go
Install it globally or locally using:
npm i aws-mjml-csv -g
You can either send it immediately using the command line like so:
~$ aws-mjml-csv --source example@example.com --subject "Hello {{ name }}" --csv /path/to/contacts.csv --dry-run --template /path/to/template.mjml
or in your code:
import { SendEmail } from 'aws-mjml-csv'
import * as AWS from 'aws-sdk'
const instance = new SendEmail({
source: 'example@example.com'
})
(async () => {
await instance.setMjml('./template.mjml')
await instance.setCsvfromPath('./contacts.csv')
let sent = 0
let errors = 0
instance.on('sent', ({ result, row, time }: { time: number, result: AWS.SES.Types.SendEmailResponse, row: Object }) => {
sent++
})
instance.on('error', ({ error, row, time }: { time: number, error: AWS.AWSError, row: Object }) => {
errors++
})
await instance.send()
console.log(`Sent ${sent} emails (${error} failed)`)
})()
If you are in a sandbox for SES, you'll be able to send 1 email per second, up to 1000. This module will throttle the sending depending on your quota.
Notice that you need at least one column called email
. AWS configuration are either done using credentials on the machine or using environment variables, check AWS documentation for that. Remember to set AWS_DEFAULT_REGION
, AWS_SECRET_ACCESS_KEY
and AWS_ACCESS_KEY_ID
Although csv-parser
is really performant and it's a stream, depending on the size of your email list, node.js might reach it's max memory waiting for SES.
MIT
16QDbqa6UMFtMCdDcJJ5N2bqryH4Q56BVU
1E6gKfkyxsjr2rSbcHbnfsQumKxkGKwRYc
0xfF9087E7112d3b7D7B5bDD6C9ffb0970ACC162E7
NNIH9VGEQFZAJIITBO9FEDSYUDYXHMAINGSKWIU9ADUHYYNTIYGJADZITOCVMWEFTKJGCNCJN9ZRFUZKCPSUOMDAKD
NXT-7TJT-8NS2-8QBS-5Y89X
GY2RWXUKYDmYDaroMmucgUdF7dLqaHDKWu
NBC772-Q3SL4X-AGVNMP-JAWGJE-U6BCSB-Q7WNAX-YU5V
XaqxcT3BDmSLGB4M6ozrET1qJPBA4RJpng
xrb_3fi16pk4gyz331r4531m7jywrfsgp3h31yoyfusac77esuamh65r5kwjz7dm
FAQs
CLI and programatic API to send emails using MJML (that is then parsed by Handlebars.js), populating your email passing the CSV columns to your template
We found that aws-mjml-csv demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.