
Research
Security News
Malicious PyPI Package Exploits Deezer API for Coordinated Music Piracy
Socket researchers uncovered a malicious PyPI package exploiting Deezer’s API to enable coordinated music piracy through API abuse and C2 server control.
fetch-observable
Advanced tools
Observable-based Fetch API that automatically refreshes data and notifies subscribers.
npm install --save fetch-observable
import fetchObservable from "fetch-observable";
// Creates a single observable for one or multiple URLs.
const liveFeed = fetchObservable(
"http://example.org/live-feed.json", // <-- URL or array of URLs.
{
fetch: fetch, // <-- Replacable fetch implementation.
refreshDelay: (iteration) => iteration * 1000, // <-- Callback or just integer ms.
method: "POST" // <-- Basic Fetch API options.
}
).map((response) => response.json()); // map() resolves Promises.
// Subscribe-syntax of ES Observables activates the observable.
const subscription1 = liveFeed.subscribe({
next (response) {
console.dir(response.json());
},
error (error) {
console.warn(error.stack || error);
}
});
// Multiple subscriptions allowed. They all get the result.
const subscription2 = liveFeed.subscribe({next () {}});
// Observable can be paused and resumed manually.
liveFeed.pause();
liveFeed.resume();
// Observable will be paused automatically when no subscriptions left.
subscription1.unsubscribe();
subscription2.unsubscribe();
Let's start one together! After you ★Star this project, follow me @Rygu on Twitter.
BSD 3-Clause license. Copyright © 2015, Rick Wong. All rights reserved.
FAQs
Observable-based Fetch API
The npm package fetch-observable receives a total of 14 weekly downloads. As such, fetch-observable popularity was classified as not popular.
We found that fetch-observable demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers uncovered a malicious PyPI package exploiting Deezer’s API to enable coordinated music piracy through API abuse and C2 server control.
Research
The Socket Research Team discovered a malicious npm package, '@ton-wallet/create', stealing cryptocurrency wallet keys from developers and users in the TON ecosystem.
Security News
Newly introduced telemetry in devenv 1.4 sparked a backlash over privacy concerns, leading to the removal of its AI-powered feature after strong community pushback.