
Research
Two Malicious Rust Crates Impersonate Popular Logger to Steal Wallet Keys
Socket uncovers malicious Rust crates impersonating fast_log to steal Solana and Ethereum wallet keys from source code.
chaos-monkey-browser
Advanced tools
A 'chaos monkey'-style mischief maker that operates on the client.
A 'chaos monkey'-style mischief maker that operates on the client
Chaos Monkey is an idea originally outlined by the Netflix tech team.
The basic idea is to have something in your stack that causes random failures in your system, so you’ll be forced to make your app resilient against random failure.
chaos-monkey-browser is a failure module that installs entirely on the client. This is particularly useful for apps that use multiple backends or when developers don't have an easy method for modifying a remote dependency.
Inspired by Chaos Monkeyware
The failure propability is configurable (0.0 - 1.0 with 1.0 equal to 100%). The default is 0.1.
The currently included failure modes (called mischiefs) are:
Currently, all of these mischiefs have equal propability. Mischiefs can be enabled independently by passing in only the desired mischiefs.
By default, all methods [GET,POST,PUT,DELETE] allow failure. Methods can be enabled independently by passing in only the desired methods.
chaos-monkey-browser is AMD-aware. It can be used with or without require.js.
var props = {
probability:0.5,
allowedMethods:['GET'],
mischiefTypes:[
ChaosMonkey.MischiefTypes.delay,
ChaosMonkey.MischiefTypes.http403
]
};
ChaosMonkey(props);
For more detailed examples, see index.html and amd.html in the examples folder.
chaos-monkey-browser works by overriding the jquery ajax call. Consequently, jquery is required. Asynchronous http calls that call the browser XMLHttpRequest API directly will not be intercepted.
FAQs
A 'chaos monkey'-style mischief maker that operates on the client.
The npm package chaos-monkey-browser receives a total of 10 weekly downloads. As such, chaos-monkey-browser popularity was classified as not popular.
We found that chaos-monkey-browser demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Socket uncovers malicious Rust crates impersonating fast_log to steal Solana and Ethereum wallet keys from source code.
Research
A malicious package uses a QR code as steganography in an innovative technique.
Research
/Security News
Socket identified 80 fake candidates targeting engineering roles, including suspected North Korean operators, exposing the new reality of hiring as a security function.