
Research
/Security News
10 npm Typosquatted Packages Deploy Multi-Stage Credential Harvester
Socket researchers found 10 typosquatted npm packages that auto-run on install, show fake CAPTCHAs, fingerprint by IP, and deploy a credential stealer.
A simple nodejs reporting server that leverages NReports.
Currently there is no GUI for creating or running reports, only GUI component is the viewer. It servers more as an API server.
var NRunner = require('nrunner');
NRunner.Server.start();
var NRunner = require('nrunner');
NRunner.WorkerService.start();
Use this method when you don't need to pass the data source data inline with the request.
http://server/runner/report_id¶m1=value1¶m2=value2&expires=days&runmode=(inline|background)
The report runner will load the report engine and pass in the parameters defined.
inline mode - the report will be executed and pushed into reporting cache, the user will be immediatly redirected to the report viewier will the generated report instance token.
background mode - the report will be executed as a background task, the user will immedatly receive a JSON response containing the original request details, a report instance token, the url to view the report and a url to the cached report directly.
javascript { report: sampleReport123, output: html, expires: 1, id: jlahdsdkas78a7dsdhajshd2 url: http://localhost/viewier/jlahdsdkas78a7dsdhajshd2 cached: https://nrunner.s3.amazonaws.com/reports/cache/2014-03/jlahdsdkas78a7dsdhajshd2.html parameters: [ { name : "param1", value: "value1"}, { name : "param2", value: "value2"} ] } Use this method when you need to pass the data source data inline with the request.
Report runner advanced works the same as the standard runner only you pass the parameters in the body of a post and can supply your datasource data inline.
http://server/runner/report_id¶m1=value1¶m2=value2&expires=days&runmode=(inline|background)
The report runner will load the report engine and pass in the parameters defined.
Post Body
JSON response containing the original request details, a report instance token, the url to view the report and a url to the cached report directly.
#####[Sample Response]
javascript { report: "sampleReport123", output: "html", expires: 1, token: "jlahdsdkas78a7dsdhajshd2" url: "http://localhost/viewier/jlahdsdkas78a7dsdhajshd2" cached: "https://nrunner.s3.amazonaws.com/reports/cache/2014-03/jlahdsdkas78a7dsdhajshd2.html" parameters: [ { name : "param1", value: "value1"}, { name : "param2", value: "value2"} ] }
####[Sample Post Body]
javascript { report: "sampleReport123", output: "html", expires: 1, runmode: "inline", parameters: [ { name : "param1", value: "value1"}, { name : "param2", value: "value2"} ], data: {} // JSON object }
+ Call the viewer url with the token received from the reporting request. This behavior happens automatically via a server side redirect when you call the runner with a runmode = "inline".
+ http://server/viewer/token
FAQs
Lightweight web container for NReports
We found that nrunner demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
Socket researchers found 10 typosquatted npm packages that auto-run on install, show fake CAPTCHAs, fingerprint by IP, and deploy a credential stealer.

Product
Socket Firewall Enterprise is now available with flexible deployment, configurable policies, and expanded language support.

Security News
Open source dashboard CNAPulse tracks CVE Numbering Authorities’ publishing activity, highlighting trends and transparency across the CVE ecosystem.