
Security News
/Research
Wallet-Draining npm Package Impersonates Nodemailer to Hijack Crypto Transactions
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
A progressive Node.js framework for building efficient and scalable server-side applications.
Nest framework TypeScript starter repository.
$ npm install ifmcommon
# usage of nestJs exception filter
import {HttpExceptionFilter ,MongoExceptionFilter } from ifmcommon
# get i18NService from app.module.ts
const i18NService = app.get<I18nService>(I18nService);
# to use as a global exception filter
# first parameter i18NService, second parameter is the kafkaConfig, third parameter is the topic which send to kafka
app.useGlobalFilters(
new MongoExceptionFilter(i18NService, kafkaConf, Topics.FACILITY_EXCEPTIONS),
new HttpExceptionFilter(i18NService, kafkaConf, Topics.FACILITY_EXCEPTIONS),
);
# usage of nestJs common interceptor
import {LoggingInterceptor ,HttpCacheInterceptor, TimeoutInterceptor } from ifmcommon
# to use as a global interceptor
# first parameter is kafkaConfig, second parameter is the topic which send to kafka for log purpose, third parameter is the topic which send to kafka for history purpose
app.useGlobalInterceptors(
new LoggingInterceptor(kafkaConf, Topics.FACILITY_LOGGER, Topics.FACILITY_OPERATION),
new TimeoutInterceptor(),
);
# LoggingInterceptor is used to log the request and response
# HttpCacheInterceptor is used to cache the request and response for getRequest() if u use @NoCache() decorator in controller it skip the cache
# TimeoutInterceptor is used to timeout the request if u use @Timeout() decorator in controller it skip the timeout
import {PostKafka,KafkaService } from ifmcommon
# usage of nestJs kafka connection
this.postKafka = new PostKafka(new KafkaService(kafkaConfig));
$kafkaconfig from kafkaJs kafkaConfig options
# producer method in postKafka
async producerSendMessage(topicName: string, message: string, key?: string) {
await this.producer.connect();
await this.producer.send({
topic: topicName,
messages: [
{
key: key || uuidv4(),
value: message,
},
],
});
await this.producer.disconnect();
}
FAQs
Unknown package
The npm package ifmcommon receives a total of 0 weekly downloads. As such, ifmcommon popularity was classified as not popular.
We found that ifmcommon demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 7 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
/Research
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
Security News
This episode explores the hard problem of reachability analysis, from static analysis limits to handling dynamic languages and massive dependency trees.
Security News
/Research
Malicious Nx npm versions stole secrets and wallet info using AI CLI tools; Socket’s AI scanner detected the supply chain attack and flagged the malware.