
Research
Malicious npm Packages Impersonate Flashbots SDKs, Targeting Ethereum Wallet Credentials
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
Convenience wrapper for
got
to interact with the GitLab API
Copied then adapted for GitLab from gh-got
$ npm install --save gl-got
Instead of:
const got = require('got');
const token = 'foo';
got('https://gitlab.com/api/v3/users/979254', {
json: true,
headers: {
'PRIVATE-TOKEN': `${token}`
}
}).then(res => {
console.log(res.body.username);
//=> 'gl-got-tester'
});
You can do:
const glGot = require('gl-got');
glGot('users/979254', {token: 'foo'}).then(res => {
console.log(res.body.username);
//=> 'gl-got-tester'
});
Or:
const glGot = require('gl-got');
glGot('https://gitlab.com/api/v3/users/979254', {token: 'foo'}).then(res => {
console.log(res.body.username);
//=> 'gl-got-tester'
});
Same as got
(including the stream API and aliases), but with some additional options below.
Errors are improved by using the custom GitLab error messages. Doesn't apply to the stream API.
Type: string
GitLab access token.
Can be set globally with the GITLAB_TOKEN
environment variable.
Type: string
Default: https://gitlab.com/api/v3
Can be set globally with the GITLAB_ENDPOINT
environment variable.
Type: Object
Can be specified as a plain object and will be serialized as JSON with the appropriate headers set.
MIT © Sindre Sorhus © Rhys Arkins
FAQs
Convenience wrapper for `got` to interact with the GitLab API
The npm package gl-got receives a total of 1,166 weekly downloads. As such, gl-got popularity was classified as popular.
We found that gl-got demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 3 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
Security News
Ruby maintainers from Bundler and rbenv teams are building rv to bring Python uv's speed and unified tooling approach to Ruby development.
Security News
Following last week’s supply chain attack, Nx published findings on the GitHub Actions exploit and moved npm publishing to Trusted Publishers.