Research
Security News
Quasar RAT Disguised as an npm Package for Detecting Vulnerabilities in Ethereum Smart Contracts
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
Remote monitoring for Node.js applications
This package provides a foundation for monitoring and controlling remote node.js applications.
It introduces the concept of a Probe - a small software component capable of exposing and controlling state within a running node.js server.
Probes are written as Backbone models, and remain dormant in your process until instantiated from remote monitors.
From the monitoring process, a Monitor class is provided to connect with a remote probe.
This package is used for writing and embedding probes into your app server, and for writing custom clients for inspecting and controlling these probes. A companion package - Node-Monitor - provides a user interface for building real-time monitor dashboards.
Install using npm
$ npm install monitor
Start the monitor service (standalone)
Normally you'll include this package into your own application server, but you can run as a standalone application as well.
$ npm start monitor
Observe a probe from a remote process
In this example we're using a REPL console to connect with the built-in Process probe.
Open a REPL console from another terminal
$ node
Create a monitor for the Process probe
> var Monitor = require('monitor');
> var processMonitor = new Monitor({server:'localhost', probeClass: 'Process'});
Connect with the probe, and view the properties
> processMonitor.connect();
> processMonitor.toJSON();
The monitor is a Backbone model, so you can watch for changes
> var showFreeMem = function(){console.log(processMonitor.get('freemem'))};
> processMonitor.on('change', showFreeMem);
Released under the Apache License 2.0
See LICENSE file.
Copyright (c) 2012 Loren West
FAQs
Runtime monitoring for node.js applications
The npm package monitor receives a total of 141 weekly downloads. As such, monitor popularity was classified as not popular.
We found that monitor demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
Security News
Research
A supply chain attack on Rspack's npm packages injected cryptomining malware, potentially impacting thousands of developers.
Research
Security News
Socket researchers discovered a malware campaign on npm delivering the Skuld infostealer via typosquatted packages, exposing sensitive data.