
Research
Security News
Malicious PyPI Package Exploits Deezer API for Coordinated Music Piracy
Socket researchers uncovered a malicious PyPI package exploiting Deezer’s API to enable coordinated music piracy through API abuse and C2 server control.
Whatap allows for application performance monitoring.
Works on Linux(32bit, 64bit), MacOSx(32bit, 64bit), Windows(32bit, 64bit).
*Node.js 지원 버젼: 4.3.2 이상
npm 에서 다음과 같은 명령어를 통해 whatap을 설치 할 수 있습니다.
$ npm install --save whatap
node_modules/whatap에 있는 whatap.conf파일을 루트 디렉토리로 복사 후 라이센스 키를 발급받은 후 추가 해 주세요.
whatap.conf 파일은 다음과 같은 내용을 포함합니다.
license=XXXXXXXXXXXXXX-XXXXXXXXXXXXXX-XXXXXXXXXXXXXX
whatap.server.host=XXX.XXX.XXX.XXX
루트 디렉토리의 Node.js Application에 다음과 같은 코드를 추가 해 주세요.
var WhatapAgent = require('whatap').NodeAgent;
어플리케이션 서버가 실행되면 애플리케이션의 모니터링 정보를 수집하기 시작합니다.
FAQs
Monitoring and Profiling Service
The npm package whatap receives a total of 1,372 weekly downloads. As such, whatap popularity was classified as popular.
We found that whatap demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers uncovered a malicious PyPI package exploiting Deezer’s API to enable coordinated music piracy through API abuse and C2 server control.
Research
The Socket Research Team discovered a malicious npm package, '@ton-wallet/create', stealing cryptocurrency wallet keys from developers and users in the TON ecosystem.
Security News
Newly introduced telemetry in devenv 1.4 sparked a backlash over privacy concerns, leading to the removal of its AI-powered feature after strong community pushback.