
Research
PyPI Package Disguised as Instagram Growth Tool Harvests User Credentials
A deceptive PyPI package posing as an Instagram growth tool collects user credentials and sends them to third-party bot services.
Extension for supporting Google Cloud Platform specific features for gRPC.
A Node.js module providing grpc supports for Google Cloud APIs.
npm install grpc-gcp --save
Let's use Spanner API as an example.
First, Create a json file defining API configuration, with ChannelPoolConfig and MethodConfig.
{
"channelPool": {
"maxSize": 10,
"maxConcurrentStreamsLowWatermark": 1
},
"method": [
{
"name": [ "/google.spanner.v1.Spanner/CreateSession" ],
"affinity": {
"command": "BIND",
"affinityKey": "name"
}
},
{
"name": [ "/google.spanner.v1.Spanner/GetSession" ],
"affinity": {
"command": "BOUND",
"affinityKey": "name"
}
},
{
"name": [ "/google.spanner.v1.Spanner/DeleteSession" ],
"affinity": {
"command": "UNBIND",
"affinityKey": "name"
}
}
]
}
Load configuration to ApiConfig.
// @grpc/grpc-js can be used in place of grpc with no changes
var grpc = require('grpc');
var grpcGcp = require('grpc-gcp')(grpc);
var fs = require('fs');
var apiDefinition = JSON.parse(fs.readFileSync('your_api_config_json_file'));
var apiConfig = grpcGcp.createGcpApiConfig(apiDefinition);
Pass gcpChannelFactoryOverride
and gcpCallInvocationTransformer
to channel options when initializing api client.
var channelOptions = {
channelFactoryOverride: grpcGcp.gcpChannelFactoryOverride,
callInvocationTransformer: grpcGcp.gcpCallInvocationTransformer,
gcpApiConfig: apiConfig,
};
var client = new SpannerClient(
'spanner.googleapis.com:443',
channelCreds,
channelOptions
);
Download source.
git clone https://github.com/GoogleCloudPlatform/grpc-gcp-node.git && cd grpc-gcp-node
git submodule update --init --recursive
Build grpc-gcp.
npm install
Setup credentials. See Getting Started With Authentication for more details.
export GOOGLE_APPLICATION_CREDENTIALS=path/to/key.json
Run unit tests.
npm test
Run system tests.
npm run system-test
FAQs
Extension for supporting Google Cloud Platform specific features for gRPC.
The npm package grpc-gcp receives a total of 137,751 weekly downloads. As such, grpc-gcp popularity was classified as popular.
We found that grpc-gcp demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
A deceptive PyPI package posing as an Instagram growth tool collects user credentials and sends them to third-party bot services.
Product
Socket now supports pylock.toml, enabling secure, reproducible Python builds with advanced scanning and full alignment with PEP 751's new standard.
Security News
Research
Socket uncovered two npm packages that register hidden HTTP endpoints to delete all files on command.