
Security News
/Research
Wallet-Draining npm Package Impersonates Nodemailer to Hijack Crypto Transactions
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
ringpop-admin
Advanced tools
Command-line tools for Ringpop
Usage: ringpop-admin [options] [command]
Commands:
checksums Prints membership checksums
dist Distribution of keyspace
dump Dump membership information to disk
count Counts members
leave Makes node leave the cluster
list List member information
lookup Lookup a key in the ring
join Makes node (re)join the cluster
status Status of members in ring
partitions Show partition information of a ring
top General membership information
reap Remove nodes marked as faulty from the cluster
heal Start a partition heal coordinated by the coordinator node
help [cmd] display help for [cmd]
Command-line tools for Ringpop
Options:
-h, --help output usage information
-V, --version output the version number
Discovery:
Most of the commands can discover the ring via
a discoverUri like this: 'ringpop://127.0.0.1:3000'.
If no protocol is specified 'ringpop://' will be
used.
Supported protocols are:
- ringpop://
Discover the ring by connecting to a host of
the ring.
Example: ringpop://127.0.0.1:3000
- file://
Discover the ring by reading a json file
containing an array of host:port combinations
Example: file:///absolute/path/to/file
Example: file://./relative/path
File content: ["127.0.0.1:3000"]
- hyperbahn://
Discover the ring by querying hyperbahn for
the members of a service. When no hyperbahn
ip and port are given 127.0.0.1:21300 will be
used.
Example: hyperbahn:///ringpop
Example: hyperbahn://hyperbahn-ip:port/ringpop
Tests are run by cram. To run the tests, first install cram:
pip install cram
Then run the tests:
npm test
For more information about how the tests work, see the file tests/README.md
.
FAQs
An admin tool for ringpop
We found that ringpop-admin demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 5 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
/Research
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
Security News
This episode explores the hard problem of reachability analysis, from static analysis limits to handling dynamic languages and massive dependency trees.
Security News
/Research
Malicious Nx npm versions stole secrets and wallet info using AI CLI tools; Socket’s AI scanner detected the supply chain attack and flagged the malware.