
Research
Malicious npm Packages Impersonate Flashbots SDKs, Targeting Ethereum Wallet Credentials
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
With byespam you can protect your websites and API with a high level spam protection.
npm i byespam
Before see it in action, you have to learn about options and syntax.
const byespam = require('byespam')([
/* all filters you want to apply */
]);
After having required the package, you have to declare what protections you want to apply, and you can do it by adding them inside of the module constructor parameter. This argument must be an array, since you can actually put how many protections you want.
{ "max_requests": 5, "protection_timeout": 10000, "effect": "Nope", "path": "/test" }
With this, you are telling library to create a protection on path '/test', saying that user can take at mos 5 requests in 10,000ms (10 seconds)
This variable is used to set how many requests the user could do inside of the timeout range
After how many times can the user continue to making requests after he stops?
This is the consequence that the user sees if the request is blocked.
It can be of three types:
If you use object type, the header 'Content-Type' will be changes into 'application/json' and the object will be sended as a string to the user,
If you use function type, the function will be called with 3 arguments passed in respectively: request, response and IP Address
It's easy, just do
app.use(...byespam.all);
After declaring byespam and app;
If the user's request go fine, you can set app a routes for this, example:
const byespam = require('byespam')( [ { path: '/', effect: (req, res) => res.render('429'), max_requests: 1, protection_timeout: 4000 } ] );
app.use(...byespam.all);
app.get('/', (req, res) => res.send('Yep!'));
Obviously you can use the "effect" function to do this as well, but for making the sketch more tidy, you can use routes.
FAQs
Protect your API using a filter for all your users' requests.
The npm package byespam receives a total of 0 weekly downloads. As such, byespam popularity was classified as not popular.
We found that byespam demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
Security News
Ruby maintainers from Bundler and rbenv teams are building rv to bring Python uv's speed and unified tooling approach to Ruby development.
Security News
Following last week’s supply chain attack, Nx published findings on the GitHub Actions exploit and moved npm publishing to Trusted Publishers.