Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
:star: We appreciate your star, it helps!
Errsole captures all errors raised in all your servers, along with the HTTP requests that caused them, which is all the information you need to reproduce the errors.
Errsole creates a sandbox environment that is an exact replica of your live app. You can reproduce the error in the sandbox and inspect every line of the code without affecting the live app.
With a feature-rich debugger directly connected to the sandbox, you can set breakpoints, reproduce the error, inspect variables, identify the problem, edit code and verify the fix without affecting your live app.
You can invite your entire development team to your app and control their permissions at a granular level. You can assign errors to your developers to speed up error resolution and increase productivity.
https://github.com/errsole/errsole.js/assets/3775513/d4d06a28-a776-4031-a2c2-c15b76dde1ed
Errsole is a Node.js module. You can install this module using the npm install command:
npm install errsole
To configure the Errsole module in your app, you need a unique token.
Follow the steps below to generate a unique token:
/**
* Put the Errsole code snippet at the top of your app's main file
*/
const errsole = require('errsole');
errsole.initialize({
framework: 'express',
token: '[Your Errsole Token]',
editCode: true,
evalExpression: true
});
/**
* Your app code starts here
*/
const express = require('express');
const app = express();
app.get('/', function (req, res) {
res.send('Hello World');
});
app.listen(3000);
Name | Type | Description |
---|---|---|
framework | string | Required. Your Node.js framework name. |
token | string | Required. Create a unique token for your app on the Errsole website. |
enableDebugger | boolean | Optional. If false, the debugger is disabled. |
editCode | boolean | Optional. If true, your developers have the ability to edit code in a sandbox while debugging an error. This feature allows your developers to debug your app's code more effectively, but it also grants them the ability to run arbitrary code on your server. You have two options: You can set it to false here to disable the code editing option for all developers, or you can set it to true here and manage the permissions of each developer on the errsole website. |
evalExpression | boolean | Optional. If true, your developers have the ability to evaluate JavaScript expressions while debugging an error. This feature allows your developers to debug your app's code more effectively, but it also grants them the ability to run arbitrary code on your server. You have two options: You can set it to false here to disable the eval expression option for all developers, or you can set it to true here and manage the permissions of each developer on the errsole website. |
:star: We appreciate your star, it helps!
If you run into any issues, please email us at support@errsole.com.
For bug reports, please open an issue on GitHub.
FAQs
Collect, Store, and Visualize Logs with a Single Module
The npm package errsole receives a total of 339 weekly downloads. As such, errsole popularity was classified as not popular.
We found that errsole demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.