
Security News
/Research
Wallet-Draining npm Package Impersonates Nodemailer to Hijack Crypto Transactions
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
Amazon Gift Code On Demand (AGCOD) API v2 implementation for distribute Amazon gift cards (gift codes) instantly in any denomination.
Add this line to your application's Gemfile:
gem 'aws_agcod'
And then execute:
$ bundle
Or install it yourself as:
$ gem install aws_agcod
require "aws_agcod"
AGCOD.configure do |config|
config.access_key = "YOUR ACCESS KEY"
config.secret_key = "YOUR SECRET KEY"
config.partner_id = "PARTNER ID"
# The `production` config is important as it determines which endpoint
# you're hitting.
config.production = true # This defaults to false.
# Optionally, you can customize the URI completely.
config.uri = "https://my-custom-agcod-endpoint.com"
config.region = "us-east-1" # default
config.timeout = 30 # default
end
request_id = "test"
amount = 10
currency = "USD" # default to USD, available types are: USD, EUR, JPY, CNY, CAD
request = AGCOD::CreateGiftCard.new(request_id, amount, currency)
# When succeed
if request.success?
request.claim_code # => code for the gift card
request.gc_id # => gift card id
request.request_id # => your request id
else
# When failed
request.error_message # => Error response from AGCOD service
end
request_id = "test"
gc_id = "test_gc_id"
request = AGCOD::CancelGiftCard.new(request_id, gc_id)
# When failed
unless request.success?
request.error_message # => Error response from AGCOD service
end
request_id = "test"
start_time = Time.now - 86400
end_time = Time.now
page = 1
per_page = 100
show_no_ops = false # Whether or not to show activities with no operation
request = AGCOD::GiftCardActivityList.new(request_id, start_time, end_time, page, per_page, show_no_ops)
if request.success?
request.results.each do |activity|
activity.status # => SUCCESS, FAILURE, RESEND
activity.created_at
activity.type
activity.card_number
activity.amount
activity.error_code
activity.gc_id
activity.partner_id
activity.request_id
end
else
request.error_message # => Error response from AGCOD service
end
git checkout -b my-new-feature
)git commit -am 'Add some feature'
)git push origin my-new-feature
)FAQs
Unknown package
We found that aws_agcod demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
/Research
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
Security News
This episode explores the hard problem of reachability analysis, from static analysis limits to handling dynamic languages and massive dependency trees.
Security News
/Research
Malicious Nx npm versions stole secrets and wallet info using AI CLI tools; Socket’s AI scanner detected the supply chain attack and flagged the malware.