
Security News
/Research
Wallet-Draining npm Package Impersonates Nodemailer to Hijack Crypto Transactions
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
Wraps nsq.js into an easy to use interface
npm install nsqubicle
Read messages using pull
and write messages using push
var nsq = require('nsqubicle');
var queue = nsq({
nsqd: ['127.0.0.1:4150'],
channel: 'my-channel'
});
queue.pull('test', function(message, callback) {
console.log('we have pulled a message!', message);
callback(); // we are done with the message
});
queue.push('test', {hello:'world'});
The options map is passed directly to nsq.js as well. In addition to the regular nsq options you can pass
{
namespace: 'namespace-topics-with-me',
broadcast: true // set to false to disable broadcasting
}
If you call the callback with an error the message will be requeued.
Per default nsqubicle broadcast all messages to a broadcast
topic as well.
You can read these messages by calling pull
without a topic
queue.pull(function(topic, message, callback) {
console.log('someone pushed to', topic, 'with message', message);
callback();
});
MIT
FAQs
easy to use module for nsq
The npm package nsqubicle receives a total of 0 weekly downloads. As such, nsqubicle popularity was classified as not popular.
We found that nsqubicle demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
/Research
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
Security News
This episode explores the hard problem of reachability analysis, from static analysis limits to handling dynamic languages and massive dependency trees.
Security News
/Research
Malicious Nx npm versions stole secrets and wallet info using AI CLI tools; Socket’s AI scanner detected the supply chain attack and flagged the malware.