Research
Security News
Malicious npm Package Targets Solana Developers and Hijacks Funds
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
A very lightweight Sinatra/MongoDB CRUD API server to be used for EmberJS development and testing. By using MongoDB as the database server, all the tables are created on the fly when POST requests are made, in other words, no tables needs to be created beforehand.
I started out using the fixture and local storage adapter in Ember, but experienced that the limitations that these adapters have, would turn out be a pain in the butt later when it was time to release my app - I wanted to make sure that what I test, was consistant with what I would release, hence the esapiserver.
Run:
Install the gem
$ gem install esapiserver
Start up your mongoDB server
$ mongoD
Start the Ember Sinatra/MongoDB API server
$ easapiserver
Database related requests:
Load a db
http://localhost:4567/select_db/ember_test_db
Reset a db - this will drop and reload the DB
http://localhost:4567/reset_db/ember_test_db
List the collections of the selected db
http://localhost:4567/db_collections
POST request:
Creates a new model
http://localhost:4567/api/:model
GET requests:
Returns a list of models
http://localhost:4567/api/:model
Returns a list of models that matches a specific query
http://localhost:4567/api/:model?ids[]=id1&ids[]=id2
Returns a model with a specific key/value
http://localhost:4567/api/:model?key=value
Returns a model with a specific id
http://localhost:4567/api/:model/:id
DELETE request:
Deletes a model with a specific id
http://localhost:4567/api/:model/:id
PUT request:
Updates a model with a specific id
http://localhost:4567/api/:model/:id
EmberJS
App.ApplicationAdapter = DS.RESTAdapter.extend
namespace: 'api'
host: 'http://127.0.0.1:4567'
corsWithCredentials: true
FAQs
Unknown package
We found that esapiserver demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
Security News
Research
Socket researchers have discovered malicious npm packages targeting crypto developers, stealing credentials and wallet data using spyware delivered through typosquats of popular cryptographic libraries.
Security News
Socket's package search now displays weekly downloads for npm packages, helping developers quickly assess popularity and make more informed decisions.