
Security News
/Research
Wallet-Draining npm Package Impersonates Nodemailer to Hijack Crypto Transactions
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
lifion-aws-event-stream
Advanced tools
Node.js parser for the application/vnd.amazon.eventstream content-type.
Node.js parser for binary streams under the application/vnd.amazon.eventstream content-type.
To install the module:
npm install lifion-aws-event-stream --save
The module exports a parse function and a Parser stream. To use the parse function:
const { parse } = require('lifion-aws-event-stream');
const buffer = Buffer.from('000000100000000005c248eb7d98c8ff', 'hex');
console.log(parse(buffer)); // { headers: {}, payload: '' }
To use the Parser stream:
const { Parser } = require('lifion-aws-event-stream');
const parser = new Parser();
parser.on('data', console.log); // { headers: {}, payload: '' }
const buffer = Buffer.from('000000100000000005c248eb7d98c8ff', 'hex');
parser.write(buffer);
Pipe an HTTP response to parse the messages as they arrive:
const got = require('got');
const { Parser } = require('lifion-aws-event-stream');
const { pipeline } = require('stream');
pipeline([
got('/', …),
new Parser(),
new Writable({
objectMode: true,
write(data, encoding, callback) {
console.log(data);
callback();
}
}),
]);
This project's implementation is based on:
object
object
Parses the specified buffer with vnd.amazon.eventstream data into an object.
Kind: static method of lifion-aws-event-stream
Returns: object
- The parsed vnd.amazon.eventstream object.
Throws:
Error
Whenever:
Param | Type | Description |
---|---|---|
buffer | Buffer | The buffer to parse. |
Transform
A transform stream that calls parse with the binary data written to it. Can be used to pipe a response stream from an AWS service HTTP request. The stream will emit errors thrown during parse calls.
Kind: inner class of lifion-aws-event-stream
Extends: Transform
v1.0.6 (2019-10-18)
#105
: Update dependency eslint to ^6.4.0#106
: Update dependency codecov to ^3.6.1#107
: Update dependency lint-staged to ^9.3.0#104
: Update dependency auto-changelog to ^1.16.1#100
: Update dependency eslint to ^6.3.0#101
: Update dependency jsdoc-to-markdown to ^5.0.1#102
: Update dependency auto-changelog to ^1.16.0#103
: Update dependency husky to ^3.0.5#99
: Update dependency lint-staged to ^9.2.5#92
: Update dependency husky to ^3.0.2#91
: Update dependency lint-staged to ^9.2.1#90
: Update dependency husky to ^3.0.1a414c06
: Adopt core commons 2.3.369c18a1
: Recreate the package-lock.json filee6f25d4
: Upgrade dependencies74a2e5e
: Recreate lock file007a53f
: Create CODE_OF_CONDUCT.mda9cad41
: Recreate lock file4cc21ee
: Adopt core commons 2.3.3FAQs
Node.js parser for the application/vnd.amazon.eventstream content-type.
The npm package lifion-aws-event-stream receives a total of 1,066 weekly downloads. As such, lifion-aws-event-stream popularity was classified as popular.
We found that lifion-aws-event-stream demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 4 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
/Research
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
Security News
This episode explores the hard problem of reachability analysis, from static analysis limits to handling dynamic languages and massive dependency trees.
Security News
/Research
Malicious Nx npm versions stole secrets and wallet info using AI CLI tools; Socket’s AI scanner detected the supply chain attack and flagged the malware.