Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
gate-executor
Advanced tools
Execute functions that return via callback in order, but pause if a function is marked as a gate.
Current Version: 0.2.3
Tested on: Node 0.10, 0.11, 0.12, iojs.
A work execution queue that provides tracing and gating. Work functions can have optional callbacks. Timeouts are triggered when execution does not complete within a specified time.
Gating places execution into a serial mode, where all gated work functions must complete in order before other work functions in the queue are called. The gate can be ignored.
Used by Seneca micro-service communication to execute tasks in order. If you haven't heard about Seneca, check out the getting started guide.
If you're using this module, feel free to contact me on twitter if you have any questions! :) @rjrodger
The gate executor provides functionality to pause gated tasks and to quit tasks that exceed a given timeout. The executor can be created with a few options:
var e0 = executor({
trace: true, // Error logging trace, default false
timeout: 150, // Timout for tasks, default 3333
error: function() {...}, // A function to wrap all errors in, default noop
stubs: { // Stubs to substitute default node functions
now: {...},
setTimeout: {...},
clearTimeout: {...}
}
})
When calling the executor with a task, use the following pattern:
e0.execute({
id: 'a', // Optional identifier for trace
fn: function() {...} // Function to be preformed
cb: function(err, out) {...}
})
The worker definition object has the following properties:
npm test
FAQs
A work queue that can be gated, stopping to wait for sub-queues to complete.
We found that gate-executor demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.