Research
Security News
Threat Actor Exposes Playbook for Exploiting npm to Build Blockchain-Powered Botnets
A threat actor's playbook for exploiting the npm ecosystem was exposed on the dark web, detailing how to build a blockchain-powered botnet.
ssb-conn-staging
Advanced tools
Module that manages potential and optional peer connections. For use with the SSB CONN family of modules.
Visual metaphor: a bench with substitute players, idle and not actively in the game, optionally available and waiting for further instructions to join or not.
This module is only used to create an SSB CONN plugin, not used directly by applications. A ConnStaging instance should be available on the CONN plugin, with the following API:
All staging entries are key-value pairs returned as an array, with the following shape:
type StagingEntry = [Address, Data]
// where...
type Address = string;
type Data = {
key?: string;
type?: 'bt' | 'lan' | 'internet';
stagingBirth: number; // timestamp
stagingUpdated: number; // timestamp
[misc: string]: any;
}
In other words, it is an array where the first element is the multiserver address for a staged peer, and the second element is an object that has some fields, e.g. key
, type
, stagingBirth
, stagingUpdated
, etc.
connStaging.stage(address, data)
: register a peer known by its address
(string, must conform to the multiserver address convention) as a newly available peer for potential connections, and a data
object argument. Returns a boolean indicating whether stage() inserted the peer (true
) or just updated it (false
)connStaging.unstage(address)
: remove the potential peer from the staging database, by its address
(string, must conform to the multiserver address convention). Returns a boolean indicating whether unstage() succeeded or not (it fails if the entry we are trying to unstage was not staged in the first place)connStaging.entries()
: returns a new Iterator
object that gives [address, data]
pairs of the peers currently in stagingconnStaging.liveEntries()
: returns a pull-stream that emits an array of entries (like connStaging.entries()
, but an array instead of an Iterator
) everytime there are updates to the staging.connStaging.listen()
: returns a pull stream that notifies of connection events, as an object {type, address}
where type
is either 'staged'
or 'unstaged'
connStaging.close()
: terminates any used resources and listeners, in preparation to destroy this instance.MIT
FAQs
Module that manages potential and optional SSB peer connections
The npm package ssb-conn-staging receives a total of 39 weekly downloads. As such, ssb-conn-staging popularity was classified as not popular.
We found that ssb-conn-staging demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
A threat actor's playbook for exploiting the npm ecosystem was exposed on the dark web, detailing how to build a blockchain-powered botnet.
Security News
NVD’s backlog surpasses 20,000 CVEs as analysis slows and NIST announces new system updates to address ongoing delays.
Security News
Research
A malicious npm package disguised as a WhatsApp client is exploiting authentication flows with a remote kill switch to exfiltrate data and destroy files.