
Research
Malicious npm Packages Impersonate Flashbots SDKs, Targeting Ethereum Wallet Credentials
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
curtain-twitcher
Advanced tools
NodeJs tool to parse a configuration file with definitions of alerts based on data available in Graphite
NodeJs tool to send structured data to consul's KV store
npm i curtain-twitcher -g
Usage: curtain-twitcher [options] <host> <path> <file>
<host>
is the address of the consul host
<path>
is the root path for the consul key/value store. The path is used as a prefix to the key/value pair details held in the configuration <file>
<file>
is the file path to the key/value pair configuration file. This a YML structured file that should mirror the structure required in the consul key/value store.
Options:
-h, --help
output usage information
-V, --version
output the version number
-p, --port <port>
Port to query the consul host on (defaults to 8500)
Example
curtain-twitcher consul.my.org my_app/environments envs.yml
with the envs.yml
containing the following:
production:
url: prod.my_app.org
servers:
server1: prod01.my_app.org
server2: prod02.my_app.org
server3: prod03.my_app.org
acceptance:
url: int.my_app.org
servers:
server1: int01.my_app.org
server2: int02.my_app.org
will produce the following key value pairs in consul:
my_app/environments/production/url prod.my_app.org
my_app/environments/production/servers/servers1 prod01.my_app.org
my_app/environments/production/servers/servers2 prod02.my_app.org
my_app/environments/production/servers/servers3 prod03.my_app.org
my_app/environments/integration/url int.my_app.org
my_app/environments/integration/servers/servers1 int01.my_app.org
my_app/environments/integration/servers/servers2 int02.my_app.org
FAQs
NodeJs tool to parse a configuration file with definitions of alerts based on data available in Graphite
The npm package curtain-twitcher receives a total of 0 weekly downloads. As such, curtain-twitcher popularity was classified as not popular.
We found that curtain-twitcher demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
Security News
Ruby maintainers from Bundler and rbenv teams are building rv to bring Python uv's speed and unified tooling approach to Ruby development.
Security News
Following last week’s supply chain attack, Nx published findings on the GitHub Actions exploit and moved npm publishing to Trusted Publishers.