
Research
Malicious npm Packages Impersonate Flashbots SDKs, Targeting Ethereum Wallet Credentials
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
easy request response pattern for udp sockets, using nodejs dgram module.
A nicer interface to the built-in dgram
module.
$ npm install --save udp-reqres
you need to have two node servers, which every server opens a udp socket, define in the bind
method. the two servers can be both "client" and "server" in the request resonse pattern.
on your "server" you need to define an event, you do this with the method on
, with the name of the event and a function. you do whatever you want and then use the callback to send the payload back to request.
on the "client" you can use the method send
with an event name, payload, port and host.
this method returns an es6 Promise with the result from the "server".
//on the "server"
const udpReqRes = require('udp-reqres');
const udpSocket = require('dgram').createSocket('udp4');
const server = udpReqRes(udpSocket);
server.bind(33335);
server.on('MY_AWESOME_EVENT', (res, cb) => {
console.log(res.question);
cb({ answer: 'i\'m fine, thanx !' });
});
//on the "client"
const udpReqRes = require('udp-reqres');
const udpSocket = require('dgram').createSocket('udp4');
const server = udpReqRes(udpSocket);
server.bind(33334);
server.send('MY_AWESOME_EVENT', { question: 'how are you ?' }, 33335).then((res) => {
console.log(`answer: ${res.answer}`);
});
binds the server to port
and host
, the host is default to localhost
register an event, eventName
is a string and the function gets a request object and a callback, call the callback to send the message back.
send an event to a certain host, returns an es6 Promise.
eventName
is a string and host
is default to localhost.
MIT
FAQs
> easy request response pattern for udp sockets, using nodejs dgram module.
The npm package udp-reqres receives a total of 0 weekly downloads. As such, udp-reqres popularity was classified as not popular.
We found that udp-reqres demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
Security News
Ruby maintainers from Bundler and rbenv teams are building rv to bring Python uv's speed and unified tooling approach to Ruby development.
Security News
Following last week’s supply chain attack, Nx published findings on the GitHub Actions exploit and moved npm publishing to Trusted Publishers.