
Security News
/Research
Wallet-Draining npm Package Impersonates Nodemailer to Hijack Crypto Transactions
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
chrome-har
Advanced tools
Create HAR files based on Chrome DevTools Protocol data.
We got tired of waiting for the +30K engineers at Google implementing a way to automate to get a HAR file https://issues.chromium.org/issues/40809195 so we implemented our own solution in the mean time.
Code originally extracted from Browsertime, initial implementation inspired by Chromedriver_har.
Make sure to generate a event trace log file that we can use to recreate your issue. If you use Browsertime you can enable the trace with --chrome.collectPerfLog
:
$ browsertime --chrome.collectPerfLog -n 1 https://www.sitespeed.io
Then take the file named chromePerflog-1.json.gz and put it in a gist or make it availible to us in any way you want.
If you use sitespeed.io:
$ sitespeed.io --browsertime.chrome.collectPerfLog -n 1 https://www.sitespeed.io
If you use Chrome-har standalone (without Browsertime/sitespeed.io) you can use get the response bodies in HARs if they are set on the response object by the caller and if the includeTextFromResponseBody
option is set to true
.
For example:
const harEvents: Array<any> = [];
client.on('Network.requestIntercepted', async (params: any) => {
// Get the response body
const response = await client.send(
'Network.getResponseBodyForInterception',
{ interceptionId: params.interceptionId },
);
// Set the body on the response object
if (params.response != null) {
params.response.body = response.body;
} else {
params.response = response;
}
// Continue the request
await client.send(
'Network.continueInterceptedRequest',
{ interceptionId: params.interceptionId },
);
harEvents.push({ method, params });
});
const har = harFromMessages(harEvents, {includeTextFromResponseBody: true});
FAQs
Create HAR files from Chrome Debugging Protocol data.
The npm package chrome-har receives a total of 165,278 weekly downloads. As such, chrome-har popularity was classified as popular.
We found that chrome-har demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 3 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
/Research
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
Security News
This episode explores the hard problem of reachability analysis, from static analysis limits to handling dynamic languages and massive dependency trees.
Security News
/Research
Malicious Nx npm versions stole secrets and wallet info using AI CLI tools; Socket’s AI scanner detected the supply chain attack and flagged the malware.