Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
cf-deployment-tracker-client
Advanced tools
This is an npm module that can track and report details of a demo/tutorial that has been deployed to Cloud Foundry
This is an npm module that can track and report details of a demo/tutorial that has been deployed to Cloud Foundry
package.json
.require("cf-deployment-tracker-client").track();
To see how to include this into your app please visit Bluemix Hello Worldhttps://github.com/IBM-Bluemix/bluemix-hello-node. You will want to pay attention to package.json, and server.js.
Sample web applications that include this package may be configured to track deployments to IBM Bluemix and other Cloud Foundry platforms. The following information is sent to a Deployment Tracker service on each deployment:
application_name
)space_id
)application_version
)application_uris
)This data is collected from the package.json
file in the sample application and the VCAP_APPLICATION
environment variable in IBM Bluemix and other Cloud Foundry platforms. This data is used by IBM to track metrics around deployments of sample applications to IBM Bluemix to measure the usefulness of our examples, so that we can continuously improve the content we offer to you. Only deployments of sample applications that include code to ping the Deployment Tracker service will be tracked.
Please see the README for the sample application that includes this package for instructions on disabling deployment tracking, as the instructions may vary based on the sample application in which this package is included.
FAQs
This Deployment Tracker Service client for Node.js applications is no longer supported. Refer to [this page](https://github.com/IBM-Bluemix/cf-deployment-tracker-service/wiki/Deployment-Tracker-Service-status) for details.
The npm package cf-deployment-tracker-client receives a total of 273 weekly downloads. As such, cf-deployment-tracker-client popularity was classified as not popular.
We found that cf-deployment-tracker-client demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 4 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.