Research
Security News
Threat Actor Exposes Playbook for Exploiting npm to Build Blockchain-Powered Botnets
A threat actor's playbook for exploiting the npm ecosystem was exposed on the dark web, detailing how to build a blockchain-powered botnet.
Spawn a process and restart it if it crashes.
npm install respawn
It is easy to use
var respawn = require('respawn');
var monitor = respawn(['node', 'server.js'], {
env: {ENV_VAR:'test'}, // set env vars
cwd: '.', // set cwd
maxRestarts:10, // how many restarts are allowed within 60s
// or -1 for infinite restarts
sleep:1000, // time to sleep between restarts,
stdio: [...] // forward stdio options
});
monitor.start(); // spawn and watch
Optionally you can specify the command to to spawn in the option map as command: [...]
monitor.start()
Starts the monitor
monitor.stop(cb)
Stops the monitor (kills the process if its running with SIGTERM)
monitor.status
Get the current monitor status. Available values are running
, stopping
, stopped
and sleeping
monitor.on('start')
The monitor has started
monitor.on('stop')
The monitor has fully stopped and the process is killed
monitor.on('sleep')
monitor is sleeping
monitor.on('spawn', process)
New child process has been spawned
monitor.on('exit', code, signal)
child process has exited
monitor.on('stdout', data)
child process stdout has emitted data
monitor.on('stderr', data)
child process stderr has emitted data
monitor.on('warn', err)
child process has emitted an error
To do graceful restart simply have your app stop gracefully when receiving SIGTERM
and do
// graceful restart (do not wait for old process to die)
monitor.stop();
monitor.start();
// hard restart (wait for old process to die)
monitor.stop(function() {
monitor.start();
});
MIT
FAQs
Spawn a process and restart it if it crashes
We found that respawn demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
A threat actor's playbook for exploiting the npm ecosystem was exposed on the dark web, detailing how to build a blockchain-powered botnet.
Security News
NVD’s backlog surpasses 20,000 CVEs as analysis slows and NIST announces new system updates to address ongoing delays.
Security News
Research
A malicious npm package disguised as a WhatsApp client is exploiting authentication flows with a remote kill switch to exfiltrate data and destroy files.