
Security News
Another Round of TEA Protocol Spam Floods npm, But It’s Not a Worm
Recent coverage mislabels the latest TEA protocol spam as a worm. Here’s what’s actually happening.
heartbeat-service
Advanced tools
Tracks process heartbeats published on the message broker and terminates those that fail to report within a timeout. Backed by MongoDB for storage. Intended for detecting and cleaning up hung or orphaned worker processes. Also enforces the instance limits
Tracks process heartbeats published on the message broker and terminates those that fail to report within a timeout. Backed by MongoDB for storage. Intended for detecting and cleaning up hung or orphaned worker processes. Also enforces the instance limits defined in a PM2 ecosystem file, rejecting registrations that exceed the configured count for a given app name. Each heartbeat updates CPU, memory, and network byte counts for the process based on its PID. Heartbeats are tagged with a service-instance session ID so that restarts do not conflict with stale database entries. On shutdown the service marks all heartbeats from its current session as killed to allow clean restarts.
heartbeat
{ pid: number, name: string } messages to this topic.MONGO_URL (default mongodb://127.0.0.1:27017)DB_NAME (default heartbeat_db)HEARTBEAT_TIMEOUT milliseconds before a process is considered stale (default 10000)CHECK_INTERVAL monitor interval in milliseconds (default 5000)ECOSYSTEM_CONFIG path to a PM2 ecosystem config file; defaults to ../../system/daemons/ecosystem.config.jsBROKER_URL WebSocket URL of the message broker (default ws://127.0.0.1:7000)pnpm install
pnpm test
⚠️ Killing processes requires appropriate permissions. Use with care.
FAQs
Tracks process heartbeats published on the message broker and terminates those that fail to report within a timeout. Backed by MongoDB for storage. Intended for detecting and cleaning up hung or orphaned worker processes. Also enforces the instance limits
We found that heartbeat-service demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Recent coverage mislabels the latest TEA protocol spam as a worm. Here’s what’s actually happening.

Security News
PyPI adds Trusted Publishing support for GitLab Self-Managed as adoption reaches 25% of uploads

Research
/Security News
A malicious Chrome extension posing as an Ethereum wallet steals seed phrases by encoding them into Sui transactions, enabling full wallet takeover.