Research
Security News
Malicious npm Package Targets Solana Developers and Hijacks Funds
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
This is a small helper library intended for monitoring multiple processes outputting the same data set, visualizing it in a ncurses table.
Example: Multiple scrapers processing different URLs logging their progress to one central monitoring entity.
pip install clientmonitor
This library consists of a server and a client. The Server accepts connections from clients and prints data received from the clients.
The clients expect the server to be running before connecting.
Port and secret are mandatory, host is optional and only relevant if server and client are not being run on the same machine.
from clientmonitor.Server import Server
server = Server(6666, "secret", host="localhost")
server.set_columns([
{
"key": "key1",
"label": "Label for Key 1"
},
{
"key": "key2",
"label": "Label for Key 2"
}
])
server.start()
# CTRL-C to stop
The columns being set are the columns that are expected to be received as data from the clients and are what the server will print.
import time
from clientmonitor.Client import Client
client = Client("client-1", 6666, "secret")
client.connect()
for i in range(0, 5):
client.send({
"key1": 100 + i,
"key2": 200 + i,
})
time.sleep(5)
client.close()
Pull request are welcome, pleas address them against the develop branch.
python -m build
python3 -m twine upload --repository testpypi dist/*
FAQs
Collect client data and display on monitor
We found that clientmonitor demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
Security News
Research
Socket researchers have discovered malicious npm packages targeting crypto developers, stealing credentials and wallet data using spyware delivered through typosquats of popular cryptographic libraries.
Security News
Socket's package search now displays weekly downloads for npm packages, helping developers quickly assess popularity and make more informed decisions.