Security News
Research
Data Theft Repackaged: A Case Study in Malicious Wrapper Packages on npm
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
P6Barrier is an AWS CDK Construct
that deploys a Custom Resource
which
will poll until AWS Lambda Function
isReady
returns true. Ideal for running
code AFTER an RDS
or EKS
is ready.
Use this to wait for an RDS
or for that matter anything to become ready.
This deploys a Custom Resource which is obviously backed by an AWS Lambda
.
This lambda
calls the lambda
with Arn
functionArn
.
This function should return the string 'True' if the resource is ready. Otherwise 'False'. This function must be provided by you and is custom for your needs.
This is abstracted from @aws-cdk/aws-eks/cluster.ts
where a Custom Resource
which makes an SSM Parameter
is used as a barrier for Resources
to depend
on until the EKS
Cluster is ready for Helm
to be run via an addHelmChart
# Example automatically generated without compilation. See https://github.com/aws/jsii/issues/826
from p6_barrier import P6Barrier
P6Barrier(self, "p6-barrier",
name="some_useful_name",
dependencies=[dep1, dep2],
function_arn="functionArn"
)
# Example automatically generated without compilation. See https://github.com/aws/jsii/issues/826
from p6_barrier import P6Barrier
is_ready = lambdajs.NodejsFunction(self, "isReady",
timeout=Duration.minutes(15),
tracing=lambda_.Tracing.ACTIVE
)
P6Barrier(self, "p6-barrier",
name="some_useful_name",
dependencies=[dep1, dep2],
function_arn=is_ready.function_arn
)
Philip M. Gollucci pgollucci@p6m7g8.com
FAQs
p6-barrier
We found that p6-barrier demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Research
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
Research
Security News
Attackers used a malicious npm package typosquatting a popular ESLint plugin to steal sensitive data, execute commands, and exploit developer systems.
Security News
The Ultralytics' PyPI Package was compromised four times in one weekend through GitHub Actions cache poisoning and failure to rotate previously compromised API tokens.