
Security News
/Research
Wallet-Draining npm Package Impersonates Nodemailer to Hijack Crypto Transactions
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
worker-pool-aws-sdk
Advanced tools
Simple pool of workers to make API calls using the AWS SDK, while leveraging Node.js Worker threads.
Simple pool of workers to make API calls using the AWS SDK, while leveraging Node.js Worker threads.
This library uses Node.js Worker threads (it depends more specifically on Piscina.js).
Example
const STS = require('aws-sdk/clients/sts')
const WorkerPoolAwsSdk = require('worker-pool-aws-sdk');
const workerPool = new WorkerPoolAwsSdk();
(async function () {
const sts = new STS({ region: 'us-east-1' });
const result = await workerPool.runAwsTask({
name: 'sts',
options: sts.config,
operation: 'getCallerIdentity',
});
console.log(result);
/*
Prints result in this shape:
{
Account: "123456789012",
Arn: "arn:aws:iam::123456789012:user/Alice",
UserId: "AKIAI44QH8DHBEXAMPLE"
}
*/
})();
Total duration of SAM local lambda with and without worker threads running on a Quad-core machine.
Check out the master branch and install dependencies to get started:
npm ci --optional
Now that you have the dependencies installed, you can run this command in the root folder to compile the whole project.
npm run build
Linting is done via TypeScript ESLint and running unit tests via Jest. The continuous integration runs these checks, but you can run them locally with:
npm run lint
npm test
This library is licensed under the MIT License.
FAQs
Simple pool of workers to make API calls using the AWS SDK, while leveraging Node.js Worker threads.
We found that worker-pool-aws-sdk demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
/Research
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
Security News
This episode explores the hard problem of reachability analysis, from static analysis limits to handling dynamic languages and massive dependency trees.
Security News
/Research
Malicious Nx npm versions stole secrets and wallet info using AI CLI tools; Socket’s AI scanner detected the supply chain attack and flagged the malware.