
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
coderetreat
Advanced tools
Automatically run your tests, and connect to the Code Retreat Game of Life server to be part of the bigger picture
Javascript runner for code retreat
The first step is to run the script bin/addToPath.sh. This will add the JavaScript, Ruby and Python wrappers to your PATH for your current session.
coderetreat NAMEOFMYFILEThis project welcomes pull requests! We also love issues and generally knowing that this project is (or at least could be) useful! Reach out to us in comments, issues or on Twitter.
You can use netcat to simulate the server and send messages:
netcat -lp 8787
The coderetreat wrapper communicates with a central stats-collecting server using simple stream connections and JSON payloads.
Whenever a test is run the stats are posted to the server in the following format:
{
"action": "consumeTestsResults",
"payload": {
"testsRun": 10,
"testsFailed": 5,
"testsIgnored": 2
}
}
This is the only unsolicited transmission from client.
The server requests an iteration:
{
"action": "processIteration",
"payload": {
"generation0": "000011101010101110111101101"
}
}
The client responds with the next iteration:
{
"respondingTo": "processIteration",
"payload": {
"generation0": "000100100111101011101011010101",
"generation1": "000100100111101011101011010101",
}
}
or an error:
{
"respondingTo": "processIteration",
"payload": {
"error": "The function could not be executed."
}
}
To build a running commentary of who has worked on which session/table, the server requests the team information:
{
"action": "getClientInfo",
}
In turn the client responds with information about the team members:
{
"respondingTo": "getClientInfo",
"payload": {
"team": [
{"name": "Ryan Brooks"},
{"name": "Ben Foxall"}
],
"session": 0,
"language": "javascript",
}
}
FAQs
Automatically run your tests, and connect to the Code Retreat Game of Life server to be part of the bigger picture
We found that coderetreat demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.