
Security News
/Research
Wallet-Draining npm Package Impersonates Nodemailer to Hijack Crypto Transactions
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
prodperfect-mailsac
Advanced tools
Node library for interacting with Mailsac mail platform
createEmailAddress(customerName: String): create email address
getInbox(subjectQuery: String, t): get mails in inbox
getMail(mailId: String, deleteMail: Boolean, mode: 'dirty' or 'text'): get content of an mail
deleteMail(mailId: String): delete a mail
getAll(t, size=20: integer): returns last n-size mails
ES6
import MailBox from 'prodperfect-mailsac';
// create an instance of the mailBox
const newMailBox = new MailBox();
// generate a new (random) email address. replace customerName with the name of the customer
const emailAddress = await newMailBox.createEmailAddress('customerName');
// get the first mail matching containing the subjectQuery
const message = await newMailBox.getInbox('welcome to mailsac', t)
// get the content of a specific mail. Using the message object from above
// set deleteMail to true to have the mail deleted immediately
// add mode to specify 'dirty' or 'text'. Default: 'dirty'
const mailContent = await newMailBox.getMail(message._id);
ES5
var MailBox = require('prodperfect-mailsac');
// create a temporary email mailbox
var mailbox = new Mailbox();
// generate a new (random) email address. replace customerName with the name of the customer
mailbox.createEmailAddress('customerName')
.then(function(addr) {
console.log('email addr: ', + addr);
});
// get the first mail matching containing the subjectQuery
mailbox.getInbox('welcome to mailsac', t)
.then(function(foundEmail) {
console.log('foundEmail :', foundEmail);
});
// get the content of a specific mail. Using the message object from above
// set deleteMail to true to have the mail deleted immediately
// add mode to specify 'dirty' or 'text'. Default: 'dirty'
mailbox.getMail(message._id);
.then(function(fullMessage) {
console.log('full message :', fullMessage);
});
FAQs
A mailsac wrapper package for prodperfect
We found that prodperfect-mailsac demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
/Research
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
Security News
This episode explores the hard problem of reachability analysis, from static analysis limits to handling dynamic languages and massive dependency trees.
Security News
/Research
Malicious Nx npm versions stole secrets and wallet info using AI CLI tools; Socket’s AI scanner detected the supply chain attack and flagged the malware.