
Security News
/Research
Wallet-Draining npm Package Impersonates Nodemailer to Hijack Crypto Transactions
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
lifion-aws-event-stream
Advanced tools
Node.js parser for the application/vnd.amazon.eventstream content-type.
Node.js parser for binary streams under the application/vnd.amazon.eventstream content-type.
To install the module:
npm install lifion-aws-event-stream --save
The module exports a parse function and a Parser stream. To use the parse function:
const { parse } = require('lifion-aws-event-stream');
const buffer = Buffer.from('000000100000000005c248eb7d98c8ff', 'hex');
console.log(parse(buffer)); // { headers: {}, payload: '' }
To use the Parser stream:
const { Parser } = require('lifion-aws-event-stream');
const parser = new Parser();
parser.on('data', console.log); // { headers: {}, payload: '' }
const buffer = Buffer.from('000000100000000005c248eb7d98c8ff', 'hex');
parser.write(buffer);
Pipe an HTTP response to parse the messages as they arrive:
const got = require('got');
const { Parser } = require('lifion-aws-event-stream');
const { pipeline } = require('stream');
pipeline([
got('/', …),
new Parser(),
new Writable({
objectMode: true,
write(data, encoding, callback) {
console.log(data);
callback();
}
}),
]);
This project's implementation is based on:
Transform
Object
Transform
A transform stream that calls parse with the binary data written to it. Can be used to pipe a response stream from an AWS service HTTP request. The stream will emit errors thrown during parse calls.
Kind: static class of lifion-aws-event-stream
Extends: Transform
Object
Parses the specified buffer with vnd.amazon.eventstream data into an object.
Kind: static method of lifion-aws-event-stream
Returns: Object
- The parsed vnd.amazon.eventstream object.
Throws:
Error
Whenever:
Param | Type | Description |
---|---|---|
buffer | Buffer | The buffer to parse. |
v1.0.2 (2019-02-27)
#47
: Update dependency eslint to ^5.14.1#46
: Update dependency jest-junit to ^6.3.0#45
: Update dependency lint-staged to ^8.1.4#44
: Update dependency codecov to ^3.2.0#43
: Update dependency jest to ^24.1.0#42
: Update dependency lint-staged to ^8.1.3#41
: Update dependency eslint to ^5.13.0#40
: Update dependency prettier to ^1.16.4#39
: Update dependency jest-junit to ^6.2.1#37
: Update dependency jest to v24#36
: Update dependency jest-junit to ^6.1.0#35
: Update dependency npm-watch to ^0.6.0#34
: Update dependency prettier to ^1.16.1#33
: Update dependency eslint to ^5.12.1#29
: Update dependency husky to ^1.3.1#30
: Update dependency eslint to ^5.12.0#31
: Update dependency auto-changelog to ^1.11.0#32
: Update dependency jest-junit to v6#28
: Update dependency eslint to ^5.10.0#27
: Update dependency prettier to ^1.15.3#25
: Update dependency lint-staged to ^8.1.0#24
: Update dependency husky to ^1.2.0#26
: Update dependency npm-watch to ^0.5.0b07c2d6
: Upgrade eslint-config-lifiondf0dd03
: Merge pull request #38 from lifion/feature/renovate-lint-staged-8.x4439212
: Update dependency lint-staged to ^8.1.1e41f037
: Re-create package-lock.jsonc1592df
: Correct the authorFAQs
Node.js parser for the application/vnd.amazon.eventstream content-type.
The npm package lifion-aws-event-stream receives a total of 1,400 weekly downloads. As such, lifion-aws-event-stream popularity was classified as popular.
We found that lifion-aws-event-stream demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 4 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
/Research
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
Security News
This episode explores the hard problem of reachability analysis, from static analysis limits to handling dynamic languages and massive dependency trees.
Security News
/Research
Malicious Nx npm versions stole secrets and wallet info using AI CLI tools; Socket’s AI scanner detected the supply chain attack and flagged the malware.