
Research
/Security News
Critical Vulnerability in NestJS Devtools: Localhost RCE via Sandbox Escape
A flawed sandbox in @nestjs/devtools-integration lets attackers run code on your machine via CSRF, leading to full Remote Code Execution (RCE).
workmail-spam-filter
Advanced tools
CDK construct to create a synchronous lambda rule for workmail inbound messages.
It deploys a lambda and the permission for workmail to invoke it.
In your project add it as a dependency:
npm i --save workmail-spam-filter
Reference it in the code:
import { WorkmailSpamFilterStack } from 'workmail-spam-filter'
new WorkmailSpamFilterStack(app, 'WorkmailSpamFilterStack', {
env: { account: '1234567890', region: 'eu-west-1' },
organization: "m-123456789",
accountId: "1234567890"
});
To create an initial empty configuration for the classifier, run
npx workmail-spam-filter@latest init
and it will create a config.json
in the folder db
which will be deployed to S3.
As this file will be empty, you might want to train the classifier with your own data.
npx workmail-spam-filter@latest train
This command uses the spam.json
and valid.json
as sources for training, both containing string arrays and writes it to config.json
, reusing its existing content.
And then deploy it:
cdk deploy
Once deployed to the same account and region as the workmail organization, you can reference it on the UI as an synchrounous lambda inbound rule. Spam messages will be moved to the junk folder.
FAQs
CDK library for spam filter lambda with workmail
The npm package workmail-spam-filter receives a total of 0 weekly downloads. As such, workmail-spam-filter popularity was classified as not popular.
We found that workmail-spam-filter demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
/Security News
A flawed sandbox in @nestjs/devtools-integration lets attackers run code on your machine via CSRF, leading to full Remote Code Execution (RCE).
Product
Customize license detection with Socket’s new license overlays: gain control, reduce noise, and handle edge cases with precision.
Product
Socket now supports Rust and Cargo, offering package search for all users and experimental SBOM generation for enterprise projects.