Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
leancloud-push
Advanced tools
支持服务端模拟客户端接收推送消息。
const LCPush = require('leancloud-push');
const appId = 'appId';
const appKey = 'appKey';
const installationId = LCPush.genInstallationId();
// 初始化 client 实例,如果只是拿来发推送 installationId 非必须参数
const push = new LCPush({ appId, appKey, installationId });
// 如果想接收推送,需要调用 open 方法,开启和服务器的连接,上步中 installationId 是必须参数
push.open((error) => {
if (error) {
console.log(`连接错误,${error}`);
} else {
console.log('连接服务器成功,可以接收推送');
}
});
// 发送推送
push.sendPush({
data: {
alert: '跨越长城,走向世界。',
},
}, (error, body) => {
if (error) {
console.log(`错误:${error.stack}`);
} else {
console.log(body);
}
});
// 接收到推送消息
push.on('message', (data) => {
console.log(`消息:${JSON.stringify(data)}`);
});
// 监听网络异常,SDK 会在底层自动重新连接服务器
push.on('reuse', () => {
console.log('异常:网络中断正在重试。。。');
});
// 捕捉错误
push.on('error', (error) => {
console.log(`错误:${error.stack}`);
});
MIT
FAQs
The npm package leancloud-push receives a total of 0 weekly downloads. As such, leancloud-push popularity was classified as not popular.
We found that leancloud-push demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.