
Research
Two Malicious Rust Crates Impersonate Popular Logger to Steal Wallet Keys
Socket uncovers malicious Rust crates impersonating fast_log to steal Solana and Ethereum wallet keys from source code.
micro-app-electron-launcher
Advanced tools
This project provides a launcher for applications built with the micro-app framework (https://github.com/mhdawson/micro-app-framework) using electron (http://electron.atom.io/). This provides the following advantages over simply opening the applications in a brower:
This is an example of the visual difference:
Of course you can access the same micro app using either the electron launch method or a brower so you can have a native look and feel on some machines and still be able to remotely access the app from other machines with only the browser installed.
You will need Node.js 4.X or higher installed on on the path.
The easiest way is to install is using:
npm install micro-app-electron-launcher
Alternatively you can clone this repo and then run npm install.
To configure the micro-apps started you specify them in the file called config.json.
For example this is my config :
{ "apps": [ { "name": "home dashboard", "hostname": "X.X.X.X", "port": "8081", "options": { "x": 3350, "y": 10, "resizable": false } }, { "name": "phone", "hostname": "X.X.X.X", "port": "8083", "options": { "x": 15, "y": 1850, "sizable": false } }, { "name": "Alert Dashboard", "hostname": "X.X.X.X", "port": "8084", "options": { "x": 3065, "y": 10, "sizable": false } }, { "name": "totp", "tls": true, "hostname": "X.X.X.X", "port": "8082", "auth": "asdkweivnaliwerld8welkasdfiuwerasdkllsdals9=", "options": { "x": 2920, "y": 10, "sizable": false } } ] }
The values you can configure for each micro-app are as follows:
The script lib/enc_config_value.js can be used to encrypt a configuration value as follows:
node lib/enc_config_value.js value mypassword
The value provided for 'value' should be the username and password required by the micro-app separated by a ':' character. For example:
node lib/enc_config_value.js "user1:pass1" mypassword
To run use:
npm start
You will be prompted for a password that must match the one used to encrypt any of the "auth" values in config.json
It seems the prompt module does not work on windows. I've hacked my install to prompt for the password in a different way and should check in something better soon.
FAQs
Launcher for micro-apps using electron
We found that micro-app-electron-launcher demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Socket uncovers malicious Rust crates impersonating fast_log to steal Solana and Ethereum wallet keys from source code.
Research
A malicious package uses a QR code as steganography in an innovative technique.
Research
/Security News
Socket identified 80 fake candidates targeting engineering roles, including suspected North Korean operators, exposing the new reality of hiring as a security function.