
Research
Security News
Malicious PyPI Package Exploits Deezer API for Coordinated Music Piracy
Socket researchers uncovered a malicious PyPI package exploiting Deezer’s API to enable coordinated music piracy through API abuse and C2 server control.
A strategy for working with lambdas.
This is an opinionated setup for your API, where lambdas reside together. Obviously you can use this setup by bringing in lambdas as submodules or packages if you’d like to maintain seperate reops.
npm install lambdakit
This project has a detailed example in ./example
. To run the example, cd
into that directory, npm_install
, and run commands from there.
To run a lambda, make a file called event.js
that consists of module.exports
of whatever request you’d give the lambda, which is often just JSON, then use the run command below with the name of the folder/lambda.
node node_modules/lambdakit --run=weather
To deploy, simply have the config in place (see below), then run the following command. It will npm install
inside each lambda, wrap it all up in a ZIP, then inject it into your AWS stack, BAM!
# roll thru all lambdas
node node_modules/lambdakit --deploy
# deploy a specific lambda (ie. weather)
node node_modules/lambdakit --deploy=weather
Note: node modules can easily be added to each lambda. Packages that require more advanced processing may need to be compiled against lambda infrastucture, but this is rare. Keep in mind, there are a few built-in node modules that are available.
package.json
(You can omit if your values are the same as these are defaults)"lambdakit": {
"region": "us-east-1",
"path-to-lambdas": "/lib"
}
region
the AWS region where your lambdas residepath-to-lambdas
is the path to the folder that holds the lambdas. Currently each folder that holds lambda contents needs to match the lambda name in AWS.config.lambdakit.js
for local deploy (You can omit if using local cli configprocess.env.AWS_ACCESS_KEY_ID = 'XXX';
process.env.AWS_SECRET_ACCESS_KEY = 'XXX';
2b) To deploy on commit from your CI, install creds on your project in the CI settings. In the case of CircleCI, it’s done at the URI pattern https://circleci.com/gh/myOrg/myProject/edit#aws
. See the /example/circle.yml
for the CI command.
.gitignore
to include the following, as your nested lambdas will be projects in and of themselves**/node_modules/**
/exports/*
/config.aws.lambda.js
FAQs
A strategy for working with lambdas.
The npm package lambdakit receives a total of 2 weekly downloads. As such, lambdakit popularity was classified as not popular.
We found that lambdakit demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers uncovered a malicious PyPI package exploiting Deezer’s API to enable coordinated music piracy through API abuse and C2 server control.
Research
The Socket Research Team discovered a malicious npm package, '@ton-wallet/create', stealing cryptocurrency wallet keys from developers and users in the TON ecosystem.
Security News
Newly introduced telemetry in devenv 1.4 sparked a backlash over privacy concerns, leading to the removal of its AI-powered feature after strong community pushback.