
Research
PyPI Package Disguised as Instagram Growth Tool Harvests User Credentials
A deceptive PyPI package posing as an Instagram growth tool collects user credentials and sends them to third-party bot services.
serverless-fargate-tasks
Advanced tools
Run and configure Fargate tasks from within your serverless project
This Serverless plugin will setup a Fargate cluster and setup services and tasks. With this plugin it's fairly easy to setup a (long running) task which would hook up to kinesis streams or SQS endpoints.
The (minimal) config is as follows:
custom:
fargate:
vpc:
subnets:
- subnet-1234
- subnet-5678
tasks:
my-task:
image: 123456789369.dkr.ecr.eu-west-1.amazonaws.com/my-image
Of course, you can customize to your hearts desire, here are all the available options:
custom:
fargate:
# you can put global environment variables here, these will be added
# to all tasks. Optional of course.
environment:
foo: bar
# you can set the execution role that will be used, this will default to the default
# role for your account
role: arn:aws:iam::123456789369:role/ecsTaskExecutionRole
vpc:
public-ip: DISABLED # optional, defaults to disabled
subnets:
- subnet-1234
- subnet-5678
security-groups: # optional, defaults to vpc default
- sg-123456678
tasks:
my-task:
name: ${self:service}-${self:provider.stage}-my-task # default name is be the object key (here 'my-task')
image: 123456789369.dkr.ecr.eu-west-1.amazonaws.com/my-image
environment: # optional
platypus: true
# local variables will always override global ones
foo: wut
# you can also use cloudformation references with eg serverless-pseudo-parameters
myArn: #{MyResource.Arn}
cpu: 512 # optional, defaults to 25% -> 256, see cloudformation docs for valid values
memory: 1GB # optional, defaults to 0.5GB
You can override the generated CF resource properties per task with the override
properties:
custom:
fargate:
tasks:
my-task:
image: 123456789369.dkr.ecr.eu-west-1.amazonaws.com/my-image
# these are all optional
override:
task:
Foo: BAR
container:
Foo: Bar
service:
Foo: BAR
vpc:
Foo: BAR
role: ARN
FAQs
Run and configure Fargate tasks from within your serverless project
We found that serverless-fargate-tasks demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
A deceptive PyPI package posing as an Instagram growth tool collects user credentials and sends them to third-party bot services.
Product
Socket now supports pylock.toml, enabling secure, reproducible Python builds with advanced scanning and full alignment with PEP 751's new standard.
Security News
Research
Socket uncovered two npm packages that register hidden HTTP endpoints to delete all files on command.