Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
The stupid dash in the name was because beehive
is another package
I hadn't known existed before starting this. Yeah, lessons learned, thanks.
BEE-HIVE lets you launches, tag, monitor and manage multiple node.js ChildProcess(es) with ease.
Install and put in your package.json with:
$ npm install bee-hive --save
!!! Not to be confused with the beehive
(without the dash) package !!!
Creates a new Hive
to manage your process.
Launch a process and give it a tag for later reference.
Gets the wrapped ChildProcess object from the hive.
Returns all the tags in the hive.
Returns all the processes launched via the hive.
Removes a tagged process from the hive. Does not kill the process.
Removes all processes from the hive. Does not kill any process.
Sends the tagged process the given kill signal. Signal defaults to node's child.kill() defaults.
Kill all processes in the hive with the given signal.
Bee class, which is what is used by the hive to wrap node.js native ChildProcess object.
Wraps the given node.js native ChildProcess object.
Bee wraps ChildProcess's stdin, stdout and stderr in a
PeekStream
which provides
a window
property that has the last few bytes that was emitted
from the stream.
Very handy for logging and instrospection. i.e. see the last few lines from stderr when the process dies.
Otherwise the stream should behaves the same as any ChildProcess stream.
Bee listens for ChildProcess's close
and exit
event automatically
on wraps and will set this property to close
and exit
respectively
when the event happens.
A new bee should have an open
state initially.
The originally wrapped process.
BSD
Just ping me @chakrit on twitter. Or just file a new GitHub issue
Pull requests also welcome! :)
FAQs
Spawn, manage and monitor multiple node.js child_process-es with ease.
We found that bee-hive demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.