Research
Security News
Quasar RAT Disguised as an npm Package for Detecting Vulnerabilities in Ethereum Smart Contracts
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
Remote monitoring and control for your node.js app
This is the core library for remote monitoring and control of your NodeJS app.
Think of it as a supercharged JMX for NodeJS:
Install using npm
$ npm install monitor
Run standalone
Play with the built-in server before embedding into your app:
$ npm start monitor
The best way to monitor and control the app is with the Monitor Dashboard, but for this example we'll go headless, driving it from another node.js process.
With the above server running in another window...
Create a test.js
// Get a monitor to the Process probe
var Monitor = require('monitor');
var processMonitor = new Monitor({server:'localhost', probeClass: 'Process'});
processMonitor.connect(function(error) {
// Show the contents of the monitor
console.log(processMonitor);
// Remote monitors are Backbone.js models,
// so you can observe them as they change
processMonitor.on('change', function() {
console.log(processMonitor.get('freemem'));
});
});
Try it out
node test.js
You should see all data from the process montitor, followed by an ongoing report of available memory.
Now add to your app
Place the following line into your app server bootstrap:
require('monitor').start();
Now start your app server and run the same test.js, design your own monitoring client, or build a visual control center with the Monitor Dashboard app.
May be freely distributed under the MIT license
See LICENSE file.
Copyright (c) 2010-2013 Loren West
FAQs
Runtime monitoring for node.js applications
We found that monitor demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
Security News
Research
A supply chain attack on Rspack's npm packages injected cryptomining malware, potentially impacting thousands of developers.
Research
Security News
Socket researchers discovered a malware campaign on npm delivering the Skuld infostealer via typosquatted packages, exposing sensitive data.