
Research
/Security News
Weaponizing Discord for Command and Control Across npm, PyPI, and RubyGems.org
Socket researchers uncover how threat actors weaponize Discord across the npm, PyPI, and RubyGems ecosystems to exfiltrate sensitive data.
EvaQueue.js provide a unified API across different high performance queue backends, including Kafka, AliMNS
EvaQueue.js provide a unified API across different high performance queue backends, including Kafka, AliMNS or other message queues which could be customized.
Features:
npm install evaqueue ali-mns node-rdkafka
EvaQueue.js will installed as peer dependency, you are free to install queue libs which only required.
NOTE: if install node-rdkafka
met error ld: symbol(s) not found for architecture x86_64
, try below command to fix
CPPFLAGS=-I/usr/local/opt/openssl/include LDFLAGS=-L/usr/local/opt/openssl/lib npm install
Produce a message to queue:
import MQ from 'evaqueue';
import Message from 'evaqueue/message';
const manager = new MQ(
require('./config'),
console,
);
const producer = manager.getProducer();
(async () => {
try {
const msg = await producer.produce(new Message({ foo: 'bar' }));
console.log('[%s] producing %o', producer.name, msg);
} catch (e) {
console.error(e);
}
})();
Consume messages from queue:
import MQ from 'evaqueue';
const manager = new MQ(
require('./config'),
console,
);
const consumer = manager.getConsumer();
(async () => {
await consumer.consuming(
async (err, message) => {
console.log('[%s] consuming %o', consumer.name, message);
},
3,
);
})();
consumer.enableGracefulExit();
Just change config file
{
defaultInstance: 'kafka_default'
}
to
{
defaultInstance: 'mns_default'
}
or switch manually by:
const manager = new MQ(
require('./config'),
console,
);
const consumer = manager.getConsumer('mns_another');
git clone git@github.com:bmqb/EvaQueue.js.git
cd EvaQueue.js
brew install jq
npm install
npm run install:peers
node-rdkafka promisfy codes some from https://github.com/joway/node-kfk
FAQs
EvaQueue.js provide a unified API across different high performance queue backends, including Kafka, AliMNS
We found that evaqueue demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
/Security News
Socket researchers uncover how threat actors weaponize Discord across the npm, PyPI, and RubyGems ecosystems to exfiltrate sensitive data.
Security News
Socket now integrates with Bun 1.3’s Security Scanner API to block risky packages at install time and enforce your organization’s policies in local dev and CI.
Research
The Socket Threat Research Team is tracking weekly intrusions into the npm registry that follow a repeatable adversarial playbook used by North Korean state-sponsored actors.