
Research
Malicious fezbox npm Package Steals Browser Passwords from Cookies via Innovative QR Code Steganographic Technique
A malicious package uses a QR code as steganography in an innovative technique.
fullstack-monitor
Advanced tools
Fullstack-monitor is log monitoring tools for developers, offering visibility of console logs, requests and responses from both the Client and Server side of your application in one single place.
This makes it easy to see what is happening across the stack as your front and back-end communicate.
In order to use this, you must also install the Fullstack-Monitor-CLI npm package.
npm install fullstack-monitor
in index.js
. import FL from 'fullstack-monitor'
FL.setup
function with the string client
argument. FL.setup('client');
setup
function is invoked will not be monitored.server.js
or index.js
, with the server
argument. const fl = require('fullstack-monitor');
fl.setup('server');
fl.run
into app.use
as a middleware function, where app
refers to const app = express();
. app.use(fl.run);
Run your application with
npm run dev
$ npm install -g fullstack-monitor-cli
Fullstack-Monitor-CLI
server.$ fullstack-monitor-cli --start
localhost:3861
or the port configured to see the user interface of fullstack-monitor. Or just use the --chrome
command:$ fullstack-monitor-cli --chrome
For an example of Fullstack-Monitor
installed on a project see this GitHub Repo here:
FAQs
Intercepts logs and requests for a fullstack application
We found that fullstack-monitor demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 4 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
A malicious package uses a QR code as steganography in an innovative technique.
Research
/Security News
Socket identified 80 fake candidates targeting engineering roles, including suspected North Korean operators, exposing the new reality of hiring as a security function.
Application Security
/Research
/Security News
Socket detected multiple compromised CrowdStrike npm packages, continuing the "Shai-Hulud" supply chain attack that has now impacted nearly 500 packages.