
Research
Two Malicious Rust Crates Impersonate Popular Logger to Steal Wallet Keys
Socket uncovers malicious Rust crates impersonating fast_log to steal Solana and Ethereum wallet keys from source code.
event-custodian
Advanced tools
π Take responsibility for listeners on event emitter and look after them
Control handlers for an event set on an EventEmitter
const Custodian = require('event-custodian');
new Custodian(emitter, 'event').mount().on('error', (error) => logger.error(error));
// Example: Avoid errors in events that can cause the process to exit with SIGTERM
new Custodian(process, 'unhandledRejection').mount().on('error', (error) => console.error(error));
By overriding native behaviour we can verify existing event handlers run in a safe environment, within a try/catch block. This way we can avoid unexpected results, such as the process exiting unexpectedly within an event handler. We can later decide how we want to handle these errors by placing a general onerror handler on the custodian.
// Reduce all existing listeners to one
const custodian = new Custodian(process, 'unhandledRejection');
// Reduce all existing listeners to one
custodian.mount();
// Handle errors coming up from registered handlers
custodian.on('error', (error) => logger.error(error));
// Add, prepend, remove event handlers as normal
process.on('unhandledRejection', console.error)
.prependListener('unhandledRejection', (error) => { ... })
.off('unhandledRejection', console.error)
.removeAllListeners('unhandledRejection');
// Custodian is now managing the call stack
// Revert to native subscription functions (remove override). Reinstate all existing handlers as individual event handlers
custodian.unmount();
If you use this application to manage unhandledRejection
, you must set an on('error')
handler. Otherwise the custodian will simply print the errors onto console.error
.
FAQs
π Take responsibility for listeners on event emitter and look after them
We found that event-custodian demonstrated a not healthy version release cadence and project activity because the last version was released a year ago.Β It has 4 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Socket uncovers malicious Rust crates impersonating fast_log to steal Solana and Ethereum wallet keys from source code.
Research
A malicious package uses a QR code as steganography in an innovative technique.
Research
/Security News
Socket identified 80 fake candidates targeting engineering roles, including suspected North Korean operators, exposing the new reality of hiring as a security function.