
Research
Malicious NuGet Packages Typosquat Nethereum to Exfiltrate Wallet Keys
The Socket Threat Research Team uncovered malicious NuGet packages typosquatting the popular Nethereum project to steal wallet keys.
keen-collector
Advanced tools
This is the module that we use to send events to Keen.IO
This module exports a function which takes a configuration object.
Given a valid configuration, it will return a function that you can send arbitrary JavaSript objects to
Those objects will be sent off to Keen.IO
// Load up the module
var KeenCollector = require('keen-collector')
// Create your configuration object
var myConfig = {
projectToken: "YOUR PROJECT TOKEN HERE"
, eventCollection: "YOUR EVENT COLLECTION HERE"
}
// Create a collector
var myCollector = KeenCollector(myConfig)
// Send it something
myCollector({ message: "Hello, world!" })
// That object should now beein in your Keen.IO collection!
projectToken
is required and must be a string
eventCollection
is required and must be a string
endpoint
is optional and defaults to https://api.keen.io/3.0/projects/
requestLog
if true
will log information about HTTP requests that are sent to Keen
responseLog
if true
will log information about HTTP responses from Keen
FAQs
Function that sends data to Keen.IO collections
We found that keen-collector demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
The Socket Threat Research Team uncovered malicious NuGet packages typosquatting the popular Nethereum project to steal wallet keys.
Product
A single platform for static analysis, secrets detection, container scanning, and CVE checks—built on trusted open source tools, ready to run out of the box.
Product
Socket is launching experimental protection for the Hugging Face ecosystem, scanning for malware and malicious payload injections inside model files to prevent silent AI supply chain attacks.