
Security News
/Research
Wallet-Draining npm Package Impersonates Nodemailer to Hijack Crypto Transactions
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
NodeJS module for executing code based on user's do not track preferences.
Tinfoil Hat checks the HTTP request's do not track property, and executes callbacks based on the current setting. The first argument is required, and is called if the users does NOT wish to be tracked.
var tinfoilhat = require('./tinfoilhat');
var putHatOn = function(request, response){
// run code knowing that "do not track"
// is in effect
};
// pass the HTTP request & response to the returned callback
tinfoilhat(putHatOn)(req, res);
To execute code based on do not track being disabled, use the second - and optional - callback argument is called if do not track is unset (i.e. the user knowingly or unknowlingly opts to be tracked).
If this callback is not set, then Tinfoil Hat will return false to indicate do not track is not active.
var tinfoilhat = require('./tinfoilhat');
var putHatOn = function(request, response){
// code will fire when "do not track" is enabled
};
var removeHat = function(request, response){
// code will fire if "do not track" is not enabled
}
// pass the HTTP request & response to the returned callback
tinfoilhat(putHatOn, removeHat)(req, res);
If you're using Connect, Express, or something similar, Tinfoil Hat can also be used a middleware layer in your application. To use it in this fashion, you do not manually pass the request & response object, as this will be handled by the app instead:
/* app's dependencies & and set up here */
// following 2 functions are user defined
// callbacks - example somewhat trivialized
// for brevity
var whenDntOn = function (req, res) {
req.tinfoilhat = " * ON *";
};
var whenDntOff = function (req, res) {
req.tinfoilhat = " - off -";
};
var app = connect();
// note that here we are not manually passing
// the request or response objects. The app will
// do that for you
app.use(tinfoilhat(whenDntOn, whenDntOff));
/* more middleware as you see fit */
http.createServer(app).listen(3000);
From within the root directory, open a terminal and run:
npm install
npm test
FAQs
Execute callbacks based on user's 'DO NOT TRACK' settings
We found that tinfoilhat demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
/Research
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
Security News
This episode explores the hard problem of reachability analysis, from static analysis limits to handling dynamic languages and massive dependency trees.
Security News
/Research
Malicious Nx npm versions stole secrets and wallet info using AI CLI tools; Socket’s AI scanner detected the supply chain attack and flagged the malware.