
Research
Malicious fezbox npm Package Steals Browser Passwords from Cookies via Innovative QR Code Steganographic Technique
A malicious package uses a QR code as steganography in an innovative technique.
serverless-aws-alias-v4
Advanced tools
Serverless framework plugin to manage AWS Lambda aliases and API Gateway integrations
serverless-aws-alias-v4
Serverless framework plugin to manage AWS Lambda aliases and API Gateway integrations
This plugin facilitates the management of multiple Lambda function versions and seamlessly updates API Gateway endpoints to reference the appropriate alias.
Key features:
npm install --save-dev serverless-aws-alias-v4
Add the plugin to your serverless.yml
file:
plugins:
- serverless-aws-alias-v4
Configure the plugin in your serverless.yml
file:
custom:
alias: dev
If the alias
property is not defined, the plugin will use the stage name specified in the provider section as a fallback.
provider:
stage: dev
To exclude specific functions from alias management:
custom:
alias:
name: dev
excludedFunctions:
- some-function
# or (will fallback to provider stage)
alias:
excludedFunctions:
- some-function
If you're using the serverless-plugin-warmup
plugin alongside this plugin and don't want to create an alias for the warmup function, make sure to add it to your excluded functions configuration:
custom:
alias:
name: dev
excludedFunctions:
- warmUpPluginDefault
# or (will fallback to provider stage)
alias:
excludedFunctions:
- warmUpPluginDefault
By default, only error messages are displayed. To view detailed logs, use one of these methods:
SLS_DEBUG=*
--verbose
flag when deploying: sls deploy --verbose
custom:
alias:
name: dev
verbose: true
# or (will fallback to provider stage)
alias:
verbose: true
FAQs
Serverless framework plugin to manage AWS Lambda aliases and API Gateway integrations
The npm package serverless-aws-alias-v4 receives a total of 237 weekly downloads. As such, serverless-aws-alias-v4 popularity was classified as not popular.
We found that serverless-aws-alias-v4 demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
A malicious package uses a QR code as steganography in an innovative technique.
Research
/Security News
Socket identified 80 fake candidates targeting engineering roles, including suspected North Korean operators, exposing the new reality of hiring as a security function.
Application Security
/Research
/Security News
Socket detected multiple compromised CrowdStrike npm packages, continuing the "Shai-Hulud" supply chain attack that has now impacted nearly 500 packages.