
Research
Two Malicious Rust Crates Impersonate Popular Logger to Steal Wallet Keys
Socket uncovers malicious Rust crates impersonating fast_log to steal Solana and Ethereum wallet keys from source code.
A light-weight efficient implementation for gRPC connection pool.
For detailed documentation please visit this wiki
Names of the RPC function must Match /^_[A-Z]/, meaning it must start with an _
followed by an Upper-Case letter
Sample .proto
file:
syntax = "proto3";
package Hello;
service Greeting {
rpc NotAvailable(Request) returns (Reply) {};
rpc _Hi(Request) returns (Reply) {};
}
message Request {
string msg = 1;
}
message Reply {
string resp = 1;
}
** Note that the RPC NotAvailable
will not be exposed by this library
const PROTO_FILE_PATH = path.join(__dirname, 'hello_grpc_pb');
const client = new GRPCClient(PROTO_FILE_PATH, {
maxConnections : 5,
packageName : 'Hello',
serviceName : 'Greeting',
url : 'localhost:50001',
prefix : 'RPC'
});
const { RPC_Hi } = client;
const response = await RPC_Hi({msg: 'Hey Bot!'})
Note: You must use the same naming convention mentioned for the above protobuf file
const PROTO_FILE_PATH = path.join(__dirname, 'hello_grpc_pb');
const client = new GRPCClient(PROTO_FILE_PATH, {
maxConnections : 2,
rpcPrefix : 'RPC',
serviceName : 'Greeting',
url : 'localhost:50001',
staticFile : true,
});
const { RPC_Hi } = client;
const request = new messages.Request();
request.setMsg('Hi');
const res = await RPC_Hi(request);
expect(res.getResp()).to.be.eql('Hello');
Notice the usage of staticFile
flag. Also notice that packageName is not needed when static file is being used.
npm i lib -S
npm run lint
npm run build
npm test
npm run coverage
This is open-source, which makes it obvious for any PRs, but I would request you to add necessary test-cases for the same
FAQs
Multi GRPC Connection Request handlers at Client End
The npm package grpc-pool receives a total of 0 weekly downloads. As such, grpc-pool popularity was classified as not popular.
We found that grpc-pool demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Socket uncovers malicious Rust crates impersonating fast_log to steal Solana and Ethereum wallet keys from source code.
Research
A malicious package uses a QR code as steganography in an innovative technique.
Research
/Security News
Socket identified 80 fake candidates targeting engineering roles, including suspected North Korean operators, exposing the new reality of hiring as a security function.