
Research
PyPI Package Disguised as Instagram Growth Tool Harvests User Credentials
A deceptive PyPI package posing as an Instagram growth tool collects user credentials and sends them to third-party bot services.
var pstarter = require('pstarter');
pstarter.startMaster(__dirname + '/config/configs.js', {}, function() {
var config = require('./config/configs.js');
pstarter.statServer(config.http.statPort, config.http.statHost);
if (process.env['NODE_ENV'] && process.env['NODE_ENV'] == 'development') {
pstarter.startWatch(__dirname, [__dirname +'/node_modules'], ['.js', '.json', '.html', '.css']);
}
}).startWorker(function() {
var config = require('./config/configs.js');
var express = require('express');
var bootstrap = require('./app/bootstrap.js');
var app = express.createServer();
bootstrap.setupApp(app, __dirname);
bootstrap.bootstrap(app);
bootstrap.postrun();
app.listen(config.http.port, config.http.ip);
});
var pstarter = require('pstarter');
pstarter.startMaster({}, {exec: './worker.js'});
var pstarter = require('pstarter');
pstarter.startWorker(function() {
console.log('Hello world!');
});
confFile
- configuration file or object. Only PID_FILE and http.numWorkers are used at the momentmasterSettings
- See http://nodejs.org/api/cluster.html#cluster_cluster_setupmaster_settingscallback
- function which will be called when master has forked workerscallback
- will call when worker has attached listener on exit signalcleanupCallback
- will call when worker receives exit signal. It pass a function for terminating process (or you can choose to exit).root
top folder to watch, all subfolder will also be watchedskipFolders
Array of folders you want to skip, absolute pathexts
Array of extension to listen on changes, including "."port
port to run stat serverhost
host to run stat serverYou need to create a symbolic link /etc/init.d/pstarter to pstarter/etc/init.d/pstarter and make pstarter executable. You need also specify NODE_BIN, SERVER, PID_FILE, AS_USER, NODEJS and NODE_ENV if your application uses it:
NODE_BIN
folder which contains SERVERSERVER
application/server file to executePID_FILE
should be /var/run/pstarter.pid in production linuxAS_USER
the username or uid that you want to run your app (worker) withNODEJS
executable nodejsNODE_ENV
for your own application; normally development/productionsudo /etc/init.d/pstarter start
sudo /etc/init.d/pstarter restart
sudo /etc/init.d/pstarter graceful
sudo /etc/init.d/pstarter force-restart
sudo /etc/init.d/pstarter stop
cd /etc/init.d/
sudo update-rc.d pstarter defaults
FAQs
Start http worker process for nodejs
The npm package pstarter receives a total of 10 weekly downloads. As such, pstarter popularity was classified as not popular.
We found that pstarter demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
A deceptive PyPI package posing as an Instagram growth tool collects user credentials and sends them to third-party bot services.
Product
Socket now supports pylock.toml, enabling secure, reproducible Python builds with advanced scanning and full alignment with PEP 751's new standard.
Security News
Research
Socket uncovered two npm packages that register hidden HTTP endpoints to delete all files on command.