
Security News
/Research
Wallet-Draining npm Package Impersonates Nodemailer to Hijack Crypto Transactions
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
##Install
npm install baio-es
##Test
npm test
##Build Gulp demands node version >= 0.10
gulp --require coffee-script/register
##API reference API
http
and log
modulesEach function in library return Q promise, no more callbacks!
Use custom http
or log
module
Inject - es.injector("$http", ...);
Module should expose request(opts)
method with Q
promise to return resulted response in JSON object
//opts structure
{
uri : "http://...", //request uri to elastic search server
method : "get", //get, post or delete http method
json : {}, //json formatted data to server
body : {}, //string data pass to server
}
Promise should return response from elastic search server (json formatted)
Inject - es.injector("$log", ...);
Should expose log
method similar to standard console.log
Add custom query
es.queryTemplates.admin_cookies_count_tripled =
parent : "count"
req: (opts) -> #format data to send
bool :
must :
term :
user : "admin"
term :
cookie_type : opts.cookie_type
resp: (res) -> res * 3 #parse data when received
#find!
es.query("admin_cookies_count_tripled", {cookie_type : "chocolate"}).then (cnt) ->
console.log(cnt)
es.query("admin_cookies_count_tripled", {cookie_type : "lemon"}).then (cnt) ->
console.log(cnt)
parent
property
query.req
which will be used to format data, after current req
formatting.resp
method.Chain of custom queries could be created as needed.
2014 Max Putilov, Data-Avail
Baio-es may be freely distributed under the MIT license.
FAQs
Elastic search basic operations
The npm package baio-es receives a total of 3 weekly downloads. As such, baio-es popularity was classified as not popular.
We found that baio-es demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
/Research
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
Security News
This episode explores the hard problem of reachability analysis, from static analysis limits to handling dynamic languages and massive dependency trees.
Security News
/Research
Malicious Nx npm versions stole secrets and wallet info using AI CLI tools; Socket’s AI scanner detected the supply chain attack and flagged the malware.