
Research
Security News
Lazarus Strikes npm Again with New Wave of Malicious Packages
The Socket Research Team has discovered six new malicious npm packages linked to North Korea’s Lazarus Group, designed to steal credentials and deploy backdoors.
botmaster-session-ware
Advanced tools
A configurable botmaster ware to provide session data to downstream middleware.
npm install botmaster-session-ware -S
const Botmaster = require('botmaster');
const SessionWare = require('botmaster-session-ware');
const {incoming, outgoing} = SessionWare();
botmaster.use('incoming', incoming);
botmaster.use('outgoing', outgoing);
Adapters should be provided in their own package. Their api must follow the MemoryStore example.
The most basic adapter ever for SessionWare
Get or create a session with the id.
Parameters
id
String a unique id for the sessionReturns Promise evaluates to an object that is the session
Update a session in the storage.
Parameters
id
String a unique id for the sessionvalue
Object the new value for the sessionReturns Promise resolves when the session has been saved
Create an object providing incoming and outgoing middleware
Parameters
options
[Object] options object for generated sessionWare
options.adapter
[Object] an object implementing the adapter api. defaults to in memory.options.sessionPath
[String] dot denoted path to where to store the context in the update. defaults to 'session'Returns Object an object that contains two functions 'incoming' and 'outgoing'. The incoming should be placed before any middleware that requires it and the outgoing should be placed after all middleware have used it.
FAQs
botmaster session ware for storing context
We found that botmaster-session-ware demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
The Socket Research Team has discovered six new malicious npm packages linked to North Korea’s Lazarus Group, designed to steal credentials and deploy backdoors.
Security News
Socket CEO Feross Aboukhadijeh discusses the open web, open source security, and how Socket tackles software supply chain attacks on The Pair Program podcast.
Security News
Opengrep continues building momentum with the alpha release of its Playground tool, demonstrating the project's rapid evolution just two months after its initial launch.