
Security News
/Research
Wallet-Draining npm Package Impersonates Nodemailer to Hijack Crypto Transactions
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
strophejs-plugin-disco
Advanced tools
Plugin for strophe.js to provide Service Discovery (XEP-0030).
npm install strophejs-plugin-disco
There are two plugins available.
This plugin allows to send disco queries and registers handlers that respond to incoming queries.
var c = new Strophe.Connection('bosh-service');
c.connect(jid,pw);
c.disco.info(jid,callback);
use node with jasmine-node plugin to run the specs
The plugin facilitates client and server side handling of discovery messages.
The plugin provides to methods (info and items) on top of the disco object that is added to the connection. You use them as follows
var c = new Strophe.Connection('http://localhost/xmpp-httpbind');
c.connect('andi@psi/strophe','andi');
c.disco.info('andi@psi/psi');
You can also pass a node, success and error handlers to the method. The items method behaves in the same way. Just make sure that your success and error handlers are passed after the node (if any).
The module adds response handlers to info and item queries. The disco object added to the connection has members for features and identity that will be used to populate the disco#info response.
<iq xmlns='jabber:client' from='andi@psi/strophe' to='andi@psi/strophe2' type='result' id='4774:sendIQ'><query xmlns='http://jabber.org/protocol/disco#info'><identity name='strophe'/><feature var='http://jabber.org/protocol/disco#info'/><feature var='http://jabber.org/protocol/disco#items'/></query></iq>
You can additional nodes using addNode, e.g. c.disco.addNode('aNode', { items: [{node: 'aNode', name: 'aName'}] });
and then query for them using the items method
c1.disco.items('andi@psi/strophe', 'aNode', function(s) { console.log(Strophe.serialize(s)) ; } )
See the specs for details.
To run the specs you should install jasmine-tool for nodejs via npm and update the references to the external libraries (Strophe, jQuery) in jasmine.json. After that you run
$> jasmine mon
and navigate your browser to http://localhost:8124 to view the specs executing.
0.0.2 (2017-07-14)
FAQs
A strophe.js plugin for XEP-0030 Service Discovery
The npm package strophejs-plugin-disco receives a total of 5,306 weekly downloads. As such, strophejs-plugin-disco popularity was classified as popular.
We found that strophejs-plugin-disco demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 4 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
/Research
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
Security News
This episode explores the hard problem of reachability analysis, from static analysis limits to handling dynamic languages and massive dependency trees.
Security News
/Research
Malicious Nx npm versions stole secrets and wallet info using AI CLI tools; Socket’s AI scanner detected the supply chain attack and flagged the malware.