
Research
/Security News
10 npm Typosquatted Packages Deploy Multi-Stage Credential Harvester
Socket researchers found 10 typosquatted npm packages that auto-run on install, show fake CAPTCHAs, fingerprint by IP, and deploy a credential stealer.
ng2-keepalive
Advanced tools
NG2 Keepalive is a keepalive module that allows sessions to be extended across multiple servers (useful for microservices without shared sessions)
npm install --save ng2-keepalive
Once installed you need to import our main module:
import {KeepaliveModule} from 'ng2-keepalive';
The only remaining part is to list the imported module in your application module, passing in a config to intialize the logger.
@NgModule({
declarations: [AppComponent, ...],
imports: [KeepaliveModule.forRoot({...}), ...],
bootstrap: [AppComponent]
})
export class AppModule {
}
To use NG2 Keepalive, you will need to add it to your an application html file
<ng2-keepalive></ng2-keepalive>
activeInterval: {number} - (in seconds) the amount of time since a last action until the user is considered idle : default 15 seconds
idleInterval: {number} - (in seconds) the amount of time a user is idle before the user is warned : default 15 minutes
warnInterval: {number} - (in seconds) the amount of time a user is warned before the user session is expired : default 60 seconds
pingInterval: {number} - (in seconds) how often the server is pinged : default 15 seconds
idleOffset {number} - (in seconds) the offset time from your session, so that the client doesn't think the session is good when the server session expires : default 60 seconds
pingUrls {string[]} - array of urls to ping ?extend=true will be added if the user has been active : default '/ping'
numberOfRetries {number} - number of times failed pings should retry before erroring out
FAQs
Microservice Keepalive Module
We found that ng2-keepalive demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
Socket researchers found 10 typosquatted npm packages that auto-run on install, show fake CAPTCHAs, fingerprint by IP, and deploy a credential stealer.

Product
Socket Firewall Enterprise is now available with flexible deployment, configurable policies, and expanded language support.

Security News
Open source dashboard CNAPulse tracks CVE Numbering Authorities’ publishing activity, highlighting trends and transparency across the CVE ecosystem.