
Research
NPM targeted by malware campaign mimicking familiar library names
Socket uncovered npm malware campaign mimicking popular Node.js libraries and packages from other ecosystems; packages steal data and execute remote code.
serverless-esm-layer
Advanced tools
A serverless plugin that will fix the problem of AWS-Layers not working with ES Modules (ESM .mjs)
In early 2022, AWS released ES Module (ESM .mjs
) support for the the Node.js 14.x Lambda Runtime and surprisingly, ESM support was released without "support" for AWS Layers
. This plugin fixed the problem.
Note: This plugin was based on the vibe/aws-esm-layer-support repository that details the problem and shows the implemented solution.
Requirements:
Install via npm:
npm install serverless-esm-layer --save-dev
plugins
array in your Serverless serverless.yml
:plugins:
- serverless-esm-layer
All done! When running SLS deploy
your lambdas will have the correct configuration to work layers with ES Module. No extra configuration is needed.
Help us making this plugin better and future proof.
npm install
git checkout -b new_feature
npm run lint
[1.2.0] - 2023-04-17
FAQs
A serverless plugin that will fix the problem of AWS-Layers not working with ES Modules (ESM .mjs)
The npm package serverless-esm-layer receives a total of 955 weekly downloads. As such, serverless-esm-layer popularity was classified as not popular.
We found that serverless-esm-layer demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Socket uncovered npm malware campaign mimicking popular Node.js libraries and packages from other ecosystems; packages steal data and execute remote code.
Research
Socket's research uncovers three dangerous Go modules that contain obfuscated disk-wiping malware, threatening complete data loss.
Research
Socket uncovers malicious packages on PyPI using Gmail's SMTP protocol for command and control (C2) to exfiltrate data and execute commands.