
Security News
/Research
Wallet-Draining npm Package Impersonates Nodemailer to Hijack Crypto Transactions
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
collective-upload
Advanced tools
Simple proof-of-concept application that can upload assets to the Widen Media Collective
Simple proof-of-concept application that can upload assets to Widen Media Collective using the node-collective client to the Media Collective REST API.
First, ensure you have set up proper OAuth credentials with Collective.
Second, set the proper environment variables based on the credentials you got from the previous step:
export COLLECTIVE_CLIENT_ID=foo
export COLLECTIVE_CLIENT_SECRET=bar
node-collective
options in the sources (e.g., protocol, port, and host -- auth is probably ok).var collective_options = {
protocol: 'http',
port: 8080,
host: 'localhost',
# I have a simple service to get
# auth token from a cookie in
# the code already, so don't
# change that.
};
npm run dev
OR
npm run start -- <OPTIONS>
Where <OPTIONS>
is the options needed to connect to your Collective instance. (optional -- defaults to local development url)
http://localhost:1337
FAQs
Simple proof-of-concept application that can upload assets to the Widen Media Collective
The npm package collective-upload receives a total of 0 weekly downloads. As such, collective-upload popularity was classified as not popular.
We found that collective-upload demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
/Research
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
Security News
This episode explores the hard problem of reachability analysis, from static analysis limits to handling dynamic languages and massive dependency trees.
Security News
/Research
Malicious Nx npm versions stole secrets and wallet info using AI CLI tools; Socket’s AI scanner detected the supply chain attack and flagged the malware.