
Research
/Security News
npm Author Qix Compromised via Phishing Email in Major Supply Chain Attack
npm author Qix’s account was compromised, with malicious versions of popular packages like chalk-template, color-convert, and strip-ansi published.
collectdout
Advanced tools
Periodically send values out to a Collectd server for statistics.
This piece of code has been sponsored by Superfeedr. They are awesome and you should really consider their service if you process RSS feeds!
npm i collectdout
Spawn a client that sends the data every 60s to myserver:
var Collectd = require('collectdout');
var client = new Collectd(60000, "collectd_server", 25826, "my_server");
Fourth argument is optional, default is os.hostname()
To transmit data securely with username 'alice' and password '12345', you can select authentication (HMAC) by setting the security level to 1.
var client = new Collectd(60000, "collectd_server", 25826, "my_server",
1, 'alice', '12345');
You can also encrypt the trasmitted data by setting the security level to 2.
var client = new Collectd(60000, "collectd_server", 25826, "my_server",
2, 'alice', '12345');
Create your plugin instance:
var plugin = client.plugin('myapp', 'worker13');
Set gauges, they are averaged within a sampling period:
plugin.setGauge('users', 'total', 23);
plugin.setGauge('load', '0', [1.0, 0.85, 0.7]);
Manipulate counters:
plugin.setCounter('if_octets', 'eth0', [0, 0]);
plugin.addCounter('uptime', '0', 1);
FAQs
Periodically send values out to a Collectd server for statistics
The npm package collectdout receives a total of 5 weekly downloads. As such, collectdout popularity was classified as not popular.
We found that collectdout demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
/Security News
npm author Qix’s account was compromised, with malicious versions of popular packages like chalk-template, color-convert, and strip-ansi published.
Research
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
Security News
Ruby maintainers from Bundler and rbenv teams are building rv to bring Python uv's speed and unified tooling approach to Ruby development.