Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
baggywrinkle
Advanced tools
Want to reduce chafing when using Sails actions inside of AWS Lambda? Baggywrinkle is the answer!
Baggywrinkle builds a modified version of a machine that proxies its inputs from the Lambda function's event
argument, and proxies its exits through the Lambda function's callback. It is intended to be used with Lambda functions that are triggered via the AWS API Gateway (that is, via HTTP requests).
$ npm install baggywrinkle --save
var lambdaFunction = require('baggywrinkle')(actionMachine);
// handler.js
var asLambda = require('baggywrinkle');
module.exports = asLambda({
inputs: {
name: {
example: 'Joe',
description: 'The person to greet'
}
},
exits: {
success: {
statusCode: 200,
description: 'Greeting was successful!'
}
}
fn: function (inputs, exits) {
return exits.success(`Hello ${inputs.name}!`);
}
});
Note that the input to Baggywrinkle can be either:
For available options, see the machine-as-action documentation. Note however that Baggywrinkle does not currently support:
view
response typeredirect
response typebadRequest
To report a bug, click here.
Please observe the guidelines and conventions laid out in the Sails project contribution guide when opening issues or submitting pull requests.
MIT © 2015-2016 The Sails Company
The Sails framework is free and open-source under the MIT License.
FAQs
Run a machine from an AWS Lambda function.
The npm package baggywrinkle receives a total of 1 weekly downloads. As such, baggywrinkle popularity was classified as not popular.
We found that baggywrinkle demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.