Research
Security News
Quasar RAT Disguised as an npm Package for Detecting Vulnerabilities in Ethereum Smart Contracts
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
Axios-like NodeJS API for Hashicorp Vault.
vault-api
require Node.js >= v8.17.0.
npm install vault-api
Requests can be made by passing the relevant config to vault
function.
import vault from 'vault-api';
// (or)
// import {vault} from 'vault-api';
// const {vault} = require('vault-api');
// Write data to vault
vault({
method: 'write',
path: 'secret/apiKey',
data: {
webApp: '5cfdf55e-cfa9-5da8-b2b2-64f30a462a09value'
}
});
// Read data from vault
vault({
method: 'read',
path: 'secret/apiKey'
});
Documentation and guides are available at Repo's Github Wiki
See CONTRIBUTING.md for Contributing guidelines.
See CODE_OF_CONDUCT.md for Code of Conduct guidelines.
Checkout the project license at LICENSE.md.
vault-api
is heavily inspired by axios
. I was inspired by the simplicity of the axios
and wanted to make a similar library for Hashicorp Vault. The ultimate goal of this library is to provide a simple, easy to use, extensible API for interacting with Hashicorp Vault. I hope you enjoy using it!
FAQs
Axios-like NodeJS API for Hashicorp Vault.
The npm package vault-api receives a total of 2,080 weekly downloads. As such, vault-api popularity was classified as popular.
We found that vault-api demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
Security News
Research
A supply chain attack on Rspack's npm packages injected cryptomining malware, potentially impacting thousands of developers.
Research
Security News
Socket researchers discovered a malware campaign on npm delivering the Skuld infostealer via typosquatted packages, exposing sensitive data.