
Research
Malicious npm Packages Impersonate Flashbots SDKs, Targeting Ethereum Wallet Credentials
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
ewindisch-test-package
Advanced tools
This package provides analytics and distributed tracing for event-driven applications running on AWS Lambda.
Install by requiring this module, passing it an object with your project token (register for access), and it will automatically monitor and collect metrics from your application running on AWS Lambda.
If you are using the Serverless Framework to deploy your lambdas, check out our serverless plugin.
Example:
var iopipe = require("iopipe")({ token: "YOUR_TOKEN"})
exports.handle = iopipe(
function (event, context) {
context.succeed("This is my serverless function!")
}
)
This library will look for an environment variable, IOPIPE_TOKEN
and will use
this if one is not explicitly passed to the configuration object. If a project
token is passed to the configuration object, the library will prefer that
token over the environment variable.
exports.handle = require("iopipe")()(
function (event, context, callback) {
// Do things here. Nothing will be reported.
}
)
Debugging is possible by seeing the debug
key to true
in the configuration as such, which will log all data sent to
IOpipe servers to STDOUT. This is also a good way to evaluate
the sort of data that IOpipe is receiving from your application.
Debugging is also enabled if the the environment variable,
IOPIPE_DEBUG
is set to a truthful value.
exports.handle = require("iopipe")({ debug: true })(
function (event, context, callback) {
// Do things here. We'll log info to STDOUT.
}
)
Apache 2.0
FAQs
IOpipe Lambda Analytics & Tracing Agent
The npm package ewindisch-test-package receives a total of 0 weekly downloads. As such, ewindisch-test-package popularity was classified as not popular.
We found that ewindisch-test-package demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
Security News
Ruby maintainers from Bundler and rbenv teams are building rv to bring Python uv's speed and unified tooling approach to Ruby development.
Security News
Following last week’s supply chain attack, Nx published findings on the GitHub Actions exploit and moved npm publishing to Trusted Publishers.