Research
Security News
Quasar RAT Disguised as an npm Package for Detecting Vulnerabilities in Ethereum Smart Contracts
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
Check that email addresses are really able to accept emails by pinging the DNS and checking for active MX records.
A wrapper for the NodeJS Dns.resolveMx method that checks the domain of an email address for valid/existence of MX records.
$ npm install legit
const legit = require('legit');
legit('validemail@validdomain.com')
.then(result => {
result.isValid ? console.log('Valid!') : console.log('Invalid!');
console.log(JSON.stringify(result));
})
.catch(err => console.log(err));
If an email addresses domain is legit then the object returned will include an isValid
key that will be set to true
as well as an mxArray
key with all the MX record information for the valid domain.
If the domain has no MX or cannot resolve any MX then it will return isValid
as false
.
Anything else is considered an error and you'll get it in the .catch
For a more modern approach using ES6, you can await
the reponse before acting on it.
const legit = require('legit');
(async () => {
try {
const response = await legit('validemail@validdomain.com');
response.isValid ? console.log('valid') : console.log('invalid');
} catch (e) {
console.log(e);
}
})();
For a valid email address, you'll get the following response object:
{
"isValid": true,
"mxArray": [
{
"exchange": "aspmx.l.google.com",
"priority": 1
},
{
"exchange": "alt1.aspmx.l.google.com",
"priority": 5
},
{
"exchange": "alt2.aspmx.l.google.com",
"priority": 5
},
{
"exchange": "alt3.aspmx.l.google.com",
"priority": 10
},
{
"exchange": "alt4.aspmx.l.google.com",
"priority": 10
}
]
}
(The MIT License)
Copyright (c) 2015-2020 Martyn Davies, and contributors.
FAQs
Check that email addresses are really able to accept emails by pinging the DNS and checking for active MX records.
The npm package legit receives a total of 1,313 weekly downloads. As such, legit popularity was classified as popular.
We found that legit demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
Security News
Research
A supply chain attack on Rspack's npm packages injected cryptomining malware, potentially impacting thousands of developers.
Research
Security News
Socket researchers discovered a malware campaign on npm delivering the Skuld infostealer via typosquatted packages, exposing sensitive data.