
Research
Malicious npm Packages Impersonate Flashbots SDKs, Targeting Ethereum Wallet Credentials
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
connect-redis-pubsub
Advanced tools
connect-redis-pubsub is a Redis session store based on connect-redis backed by node_redis. Requires redis >= 2.0.0
for the SETEX command.
This module has the ability to subscribe to session changes based on the sid
of a session. Anytime a session is modified, it will publish to the session's channel, and any client subscribed to that session, will receive the updated session information.
$ npm install connect-redis-pubsub
pubsub
An instance of the redis-sub moduleclient
An existing redis client object you normally get from redis.createClient()
subClient
An existing redis client object that is going to ONLY be used for subscriptionshost
Redis server hostnameport
Redis server portnottl
Redis session TTL in secondsdb
Database index to usepass
Password for Redis authenticationprefix
Key prefix defaulting to "sess:"createClient()
method.var connect = require('connect'),
RedisStore = require('connect-redis-pubsub')(connect);
connect()
.use(connect.session({ store: new RedisStore(options), secret: 'disco cat' }))
Subscribing:
RedisStore.subscribe(sid, callback)
Unsubscribing:
RedisStore.unsubscribe(sid, callback)
MIT
FAQs
Redis session store for Connect - with pub/sub!
The npm package connect-redis-pubsub receives a total of 1 weekly downloads. As such, connect-redis-pubsub popularity was classified as not popular.
We found that connect-redis-pubsub demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
Security News
Ruby maintainers from Bundler and rbenv teams are building rv to bring Python uv's speed and unified tooling approach to Ruby development.
Security News
Following last week’s supply chain attack, Nx published findings on the GitHub Actions exploit and moved npm publishing to Trusted Publishers.