
Research
Malicious npm Packages Impersonate Flashbots SDKs, Targeting Ethereum Wallet Credentials
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
node-red-contrib-amqp-docker
Advanced tools
node-red-contrib-amqp-docker
is a Node-RED package that connects directly to an AMQP server (e.g. RabbitMQ). It contains an input, an output and a configuration node to connect to AMQP exchanges or queues for Node-RED.
It uses the amqp-ts library for the AMQP connectivity.
If you have installed Node-RED as a global node.js package (you use the command node-red
anywhere to start it), you need to install
node-red-contrib-amqp as a global package as well:
$[sudo] npm install -g node-red-contrib-amqp-docker
If you have installed the .zip or cloned your own copy of Node-RED from github, you can install it as a normal npm package inside the Node-RED project directory:
<path/to/node-red>$ npm install node-red-contrib-amqp-docker
The package contains the following Node-RED nodes:
Subscribes to an AMQP exchange or queue and reads messages from it. It outputs an object called
msg
containing the following fields:
msg.payload
is a string or an object containing the content of the AMQP message.msg.topic
is a string containing the routing-key of the AMQP message.msg.amqpMessage
is an amqp-ts Message
object containing the received message.sendtoIf a topic is defined in the input node definition, that will be sent as msg.topic
instead of the routing key.
In the settings you can only define the exchange type or queue and it's name. If you need to use an exchange or a queue with specific settings you can define the exchange or queue in the topology tab of the AMQP server configuration node. The input node will use the exchange or queue defined in the topology.
Delivers incoming the message payload to the specified exchange or queue. It expects an object called
msg
containing the following fields:
msg.payload
: string or an object containing the content of the AMQP message to be sent.msg.topic
: string containing the routing-key of the AMQP message to be sent.msg.options
: object containing specific AMQP properties for the message to be sent, see the
amqplib publish documentation for more information.If a topic is defined in the output node definition, that will be sent as routing-key instead of the msg.topic
. If the msg.payload
field does not exist, the whole msg object will be sent.
In the settings you can only define the exchange type or queue and it's name. If you need to use an exchange or a queue with specific settings you can define the exchange or queue in the topology tab of the AMQP server configuration node. The output node will use the exchange or queue defined in the topology.
Defines the connection to the AMQP server. You can also define in more detail the exchanges and queues that are used in the input and output nodes and even define bindings between exchanges and queues in the topology tab.
In the topology tab you can define the AMQP server exchange and queue topology (exchanges, queues and bindings). You define the topology in the JSON editor.
Topology configuration example:
{
"exchanges": [
{"name": "exchange1", "type": "direct", "options": {"durable": false}},
{"name": "exchange2"}
],
"queues": [
{"name": "queue1", "options": {"messageTtl": 60000}},
{"name": "queue2"}
],
"bindings": [
{"source": "exchange1", "queue": "queue1", "pattern": "debug", "args": {}},
{"source": "exchange1", "exchange": "exchange2", "pattern": "error"},
{"source": "exchange2", "queue": "queue2"}
]
};
Entering invalid credentials (username/password) in the AMQP configuration node can cause node-red to malfunction
Package library 'amqlib' is outdated, requiring breaking changes
Build libraries 'typescript' and 'gulp-typescript' are outdated, requiring breaking changes
BUG: When bringing up node-red at start, outgoing node sits in 'connecting'. Trivial change/deploy and it connects
POSSIBLE BUG: Observed along with the above bug, a message landing on the AMQP out node in the startup/non-connected state, that presumably should have failed to send, then throw an exception which would be caught in a catch node, is not throwing, and just failing silently
Very slow memory leak, unsure if this library, node-red in general, or outdated dependencies: In a test container with an AMQP-out node, sending out 30 messages/sec, with starting memory footprint of ~110 MB, slowly drifts up to ~150 MB, over a four day period.
FAQs
Node-RED AMQP input and output nodes for docker
The npm package node-red-contrib-amqp-docker receives a total of 3 weekly downloads. As such, node-red-contrib-amqp-docker popularity was classified as not popular.
We found that node-red-contrib-amqp-docker demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
Security News
Ruby maintainers from Bundler and rbenv teams are building rv to bring Python uv's speed and unified tooling approach to Ruby development.
Security News
Following last week’s supply chain attack, Nx published findings on the GitHub Actions exploit and moved npm publishing to Trusted Publishers.