Research
Security News
Quasar RAT Disguised as an npm Package for Detecting Vulnerabilities in Ethereum Smart Contracts
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
Simple mechanism for converting Express Http to a queue and back.
Currently multibyte only works reliably with Express 3 and formidable. Streaming only works from server->client
npm install cuteyp
var express = require('express');
var cuteyp = require('cuteyp');
var app = express();
app.listen(8080);
var queue = cuteyp.redis(redisConfig); //OR = cuteyp.stomp(stompitConfig);
cuteyp.fromHttp(app, queue, {
replyTo: 'queue.reply',
ttl: 30000, // depends on implementation
mappingFn: function(req) { //
var service = req.path.split('/')[1];
return 'queue.request.' + service;
}
});
redisConfig
can include host
, port
and any other options supported by node redis client.
mappingFn can be asynchronous with callback as a second parameter. Callback should be called with err
and destination
.
var app = express(); app.get('/foo/bar', function() { ...});
var queue = cuteyp.redis(redisConfig); //OR = cuteyp.stomp(stompitConfig); cuteyp.toHttp(app, queue, 'queue.request.foo' );
Http requests to FE are converted into messages and placed on the queue. The BE service subscribes to the queue on a particular channel/queue and when it receives a message it converts it into an Http request and passes it to express to 'handle'. When express writes the response, cuteyp captures the response, packages it up in a message and returns it to the queue via the replyTo address. Back on the FE, cuteyp is subscribing to the replyTo queue and will convert the reply message to a response to write back to the client.
Images are converted to Base64
Redis and Stomp are supported and there is a simple interface to implement your own queue
FAQs
Stompify your Express App
The npm package cuteyp receives a total of 1 weekly downloads. As such, cuteyp popularity was classified as not popular.
We found that cuteyp demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 3 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
Security News
Research
A supply chain attack on Rspack's npm packages injected cryptomining malware, potentially impacting thousands of developers.
Research
Security News
Socket researchers discovered a malware campaign on npm delivering the Skuld infostealer via typosquatted packages, exposing sensitive data.