
Research
Malicious npm Packages Impersonate Flashbots SDKs, Targeting Ethereum Wallet Credentials
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
directomatic
Advanced tools
This service, intended to run locally or as a Cloudflare Worker, consumes a list of redirect paths (or full URLs) from a Google Sheet and produces a validated, localized, full-URL list of rules for Cloudflare's Bulk Redirects.
This service exposes a very simple API but currently lacks a frontend. I hope you
like Postman or Insomnia.
Or you're a badass who can cURL
everything.
AUTH_TOKEN
the Bearer token used to authenticate any Directomatic requestGSHEETS_ID
the spreadsheet ID, which you can get from the URLGSHEETS_API_KEY
the API key for Google SheetsCF_ACCT_ID
the Account Tag (external ID) that owns the listCF_LIST_ID
the Rules List ID, which must be a "redirects" listCF_API_TOKEN
the API key for Cloudflare APIwrangler.toml
that the default values are acceptable for:
GSHEETS_API_ENDPOINT
CF_API_ENDDPOINT
DEFAULT_DEST_DOMAIN
the default base domain and schema for path-only rules.
wrangler publish
or use wrangler dev
to run it locally.
/status
to confirm that both API integrations are properly running.* Specifics below.
wrangler secret save GSHEETS_API_KEY
https://docs.google.com/spreadsheets/d/THIS_PART_IS_THE_SPREADSHEET_ID/edit#gid=0
wrangler secret save GSHEETS_ID
Create the List
https://dash.cloudflare.com/ACCOUNT_ID_HERE/configurations/lists/LIST_ID_HERE/add
wrangler secret save CF_ACCT_ID
wrangler secret save CF_LIST_ID
Provision the API Key
wrangler secret save CF_API_TOKEN
/status
to confirm both integrations are working./list
to read and validate rules from the spreadsheet./diff
to compare processed rules from the spreadsheet with the published
rules on the Rules List API to see what would be added or removed.
/publish
to process the spreadsheet into rules and replace the List on
Cloudflare.400
error, make sure the tab with the redirects
list is called "Redirects" and that the spreadsheet is publicly readable.gitFAQs
Redirect Generator and Transformer Robot
We found that directomatic demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
Security News
Ruby maintainers from Bundler and rbenv teams are building rv to bring Python uv's speed and unified tooling approach to Ruby development.
Security News
Following last week’s supply chain attack, Nx published findings on the GitHub Actions exploit and moved npm publishing to Trusted Publishers.