Research
Security News
Malicious npm Package Targets Solana Developers and Hijacks Funds
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
skaleb-ipstack-client
Advanced tools
ipstack offers a powerful, real-time IP to geolocation API capable of looking up accurate location data and assessing security threats originating from risky IP addresses. Results are delivered within milliseconds in JSON format. Using the ipstack API you will be able to locate website visitors at first glance and adjust your user experience and application accordingly.
You can install this package via npm
$ npm install skaleb-ipstack-client
Getting the geolocation based on a single IP address.
import {
Geolocation,
IPStackClient,
InvalidAccessKeyError,
IPStackClientConfiguration
} from 'ipstack-client'
const ipAddress = '41.121.45.123'
const configuration: IPStackClientConfiguration = {
token: 'some-token',
timeout: 1000
}
const client = new IPStackClient(configuration)
// Getting the ISO country code for an IP address
client.getLocation(ipAddress)
.then((response: Geolocation) => {
console.log(response.getRawLocationData())
})
.catch((invalidAccess: InvalidAccessKeyError) => {
console.log(invalidAccess.message)
})
This project is mostly covered by unit tests. Various cases have been accounted for both in the codebase and in the tests covering it. If a bug is picked up regarding the test suite or code, feel free to make a contribution to help correct the bug.
To run the tests, you can simply run the following test
command/s.
npm run test
npm run coverage
Still working on the multiple addresses and selected fields.
Feedback and contributions are more than welcome. Should you feel there is something you wish to contribute to this project, feel free to make a merge request. Ensure that whatever proposed change, has tests covering various cases for the change and if required, update all relevant documentation.
FAQs
A client for the IP Stack API
The npm package skaleb-ipstack-client receives a total of 1 weekly downloads. As such, skaleb-ipstack-client popularity was classified as not popular.
We found that skaleb-ipstack-client demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
Security News
Research
Socket researchers have discovered malicious npm packages targeting crypto developers, stealing credentials and wallet data using spyware delivered through typosquats of popular cryptographic libraries.
Security News
Socket's package search now displays weekly downloads for npm packages, helping developers quickly assess popularity and make more informed decisions.