
Research
Malicious npm Packages Impersonate Flashbots SDKs, Targeting Ethereum Wallet Credentials
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
cta-scr-api-client-durban-2015
Advanced tools
The API client module for the CTA Shared Content Repository (Durban Hackathon 2015 edition)
The API client module for the CTA Shared Content Repository
This is a special version of the API client that was made and published specifically for the AgriHack challenge in Durban
http://durban-agrihack.ict4ag.org/index.php/about-2/
$ npm install cta-scr-api-client-durban-2015 --save
Generate a project and then run grunt to build/update the distribution sources.
You can also use grunt watch
to continuously update when file changes are detected.
There is a pubsub-js based setup you can subscribe to like so:
subscription = api.events.subscribe( "enrichment", ( msg, data ) ->
console.log( "[SOCKET] enrichment", msg, data or "" )
)
or for only articles:
subscription = api.events.subscribe( "enrichment.article", ( msg, data ) ->
console.log( "[SOCKET] enrichment", msg, data or "" )
)
or for a specific article:
subscription = api.events.subscribe( "enrichment.article.<articleId>", ( msg, data ) ->
console.log( "[SOCKET] enrichment", msg, data or "" )
)
Don't forget to unsubscribe when you no longer want to listen to the messages:
api.events.unsubscribe( subscription )
The msg will contain the full message name. This will always be in the format:
enrichment.<type>.<id>
The data will be an object that looks like this:
{
type: "article",
id: articleId,
success: true,
msg: "done"
}
FAQs
The API client module for the CTA Shared Content Repository (Durban Hackathon 2015 edition)
The npm package cta-scr-api-client-durban-2015 receives a total of 0 weekly downloads. As such, cta-scr-api-client-durban-2015 popularity was classified as not popular.
We found that cta-scr-api-client-durban-2015 demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
Security News
Ruby maintainers from Bundler and rbenv teams are building rv to bring Python uv's speed and unified tooling approach to Ruby development.
Security News
Following last week’s supply chain attack, Nx published findings on the GitHub Actions exploit and moved npm publishing to Trusted Publishers.