Research
Security News
Malicious npm Package Targets Solana Developers and Hijacks Funds
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
Easy UDP/TCP sensor data sending to a remote GOM node. This gem includes a GNP callback server, support for automatic observer refreshments and command line tools for reading, writing and observing GOM entries.
The gem provides a daemon which connects your sensor to the GOM HTTP update protocol. You can start the daemon from the command line with its GOM URL:
$ gom-sensor-port http://gom.dev.artcom.de/sensor
The sensor will load its configuration from that GOM node. The configuration values and their defauls are:
interface: '0.0.0.0'
port: 44470
verbose: false
mode: :udp
(Note: only udp mode is currently implemented) Any of these defaults can be change from the command line:
$ gom-sensor-port --interface=1.1.1.23 http://gom.dev.artcom.de/sensor
gom-sensor-port will than listen to incoming sensor packages and interpret the incoming messages as simple key value pair which it writes to the GOM:
received from sensor:
foo:123
written to GOM:
/sensor:raw = 'foo:123'
/sensor/values:foo = '123'
use the bundler tasks:
$ rake build install
optional:
$ rake release
see Gemfile
Copyright (c) 2010/13 art+com AG/dirk luesebrink. See LICENSE for details.
FAQs
Unknown package
We found that gom-sensor-ports demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
Security News
Research
Socket researchers have discovered malicious npm packages targeting crypto developers, stealing credentials and wallet data using spyware delivered through typosquats of popular cryptographic libraries.
Security News
Socket's package search now displays weekly downloads for npm packages, helping developers quickly assess popularity and make more informed decisions.