
Security News
/Research
Wallet-Draining npm Package Impersonates Nodemailer to Hijack Crypto Transactions
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
lifion-aws-event-stream
Advanced tools
Node.js parser for the application/vnd.amazon.eventstream content-type.
Node.js parser for binary streams under the application/vnd.amazon.eventstream content-type.
To install the module:
npm install lifion-aws-event-stream --save
The module exports a parse function and a Parser stream. To use the parse function:
const { parse } = require('lifion-aws-event-stream');
const buffer = Buffer.from('000000100000000005c248eb7d98c8ff', 'hex');
console.log(parse(buffer)); // { headers: {}, payload: '' }
To use the Parser stream:
const { Parser } = require('lifion-aws-event-stream');
const parser = new Parser();
parser.on('data', console.log); // { headers: {}, payload: '' }
const buffer = Buffer.from('000000100000000005c248eb7d98c8ff', 'hex');
parser.write(buffer);
Pipe an HTTP response to parse the messages as they arrive:
const got = require('got');
const { Parser } = require('lifion-aws-event-stream');
const { pipeline } = require('stream');
pipeline([
got('/', …),
new Parser(),
new Writable({
objectMode: true,
write(data, encoding, callback) {
console.log(data);
callback();
}
}),
]);
This project's implementation is based on:
object
object
Parses the specified buffer with vnd.amazon.eventstream data into an object.
Kind: static method of lifion-aws-event-stream
Returns: object
- The parsed vnd.amazon.eventstream object.
Throws:
Error
Whenever:
Param | Type | Description |
---|---|---|
buffer | Buffer | The buffer to parse. |
Transform
A transform stream that calls parse with the binary data written to it. Can be used to pipe a response stream from an AWS service HTTP request. The stream will emit errors thrown during parse calls.
Kind: inner class of lifion-aws-event-stream
Extends: Transform
v1.0.5 (2019-07-12)
#86
: Update dependency auto-changelog to ^1.14.1#82
: Update dependency lint-staged to v9#83
: Update dependency husky to v3#81
: Update dependency husky to ^2.7.0#80
: Update dependency eslint to ^6.0.1#78
: Update dependency eslint to v6#79
: Update dependency husky to ^2.5.0#73
: Update dependency eslint-config-lifion to ^1.2.3#74
: Update dependency husky to ^2.4.1#76
: Update dependency prettier to ^1.18.2#77
: Update dependency lint-staged to ^8.2.1#75
: Update dependency lint-staged to ^8.2.0#72
: Update dependency lint-staged to ^8.1.7#71
: Update dependency codecov to ^3.5.0#70
: Update dependency husky to ^2.3.0#69
: Update dependency prettier to ^1.17.1#68
: Update dependency jsdoc-to-markdown to v5#67
: Update dependency codecov to ^3.4.0#66
: Update dependency jest to ^24.8.0#65
: Update dependency lint-staged to ^8.1.6#64
: Update dependency jest-junit to ^6.4.0#63
: Update dependency husky to ^2.2.0#62
: Update dependency husky to v2470c034
: Adopt the latest linter5fd9445
: Complete adoption of GitHub Actionsb887030
: Update main.workflowFAQs
Node.js parser for the application/vnd.amazon.eventstream content-type.
The npm package lifion-aws-event-stream receives a total of 1,400 weekly downloads. As such, lifion-aws-event-stream popularity was classified as popular.
We found that lifion-aws-event-stream demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 4 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
/Research
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
Security News
This episode explores the hard problem of reachability analysis, from static analysis limits to handling dynamic languages and massive dependency trees.
Security News
/Research
Malicious Nx npm versions stole secrets and wallet info using AI CLI tools; Socket’s AI scanner detected the supply chain attack and flagged the malware.