
Security News
/Research
Wallet-Draining npm Package Impersonates Nodemailer to Hijack Crypto Transactions
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
node-red-contrib-dnsquery
Advanced tools
Gets the DNS records of a given type of a domain name.
By default this node gets the A records, but other record types can be queried. The "ANY" record type should return ALL available records (but unfortunately doesn't always work).
msg.payload
there's a .domain_name:string, it overrides the domain_name setup in the config box Domain Name.msg.payload
there's a .record_type:string, it overrides the record_type setup in the config box Record Type.msg.payload
there's a .dns_ip:string, it overrides the dns_ip setup in the config box DNS IP.Returns the data in msg.payload
with following content:
{
ok:boolean,
error:errortxt,
dns_ip: dns_ip,
domain:domain,
type:record_type,
answer:[
records
]
}
Uses by default the DNSs of the OS, but you can specify a different one in the config box DNS. dnsquery(v1.0.7)
Example:
FAQs
Gets the DNS records of a given type of a domain name.
The npm package node-red-contrib-dnsquery receives a total of 27 weekly downloads. As such, node-red-contrib-dnsquery popularity was classified as not popular.
We found that node-red-contrib-dnsquery demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
/Research
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
Security News
This episode explores the hard problem of reachability analysis, from static analysis limits to handling dynamic languages and massive dependency trees.
Security News
/Research
Malicious Nx npm versions stole secrets and wallet info using AI CLI tools; Socket’s AI scanner detected the supply chain attack and flagged the malware.