
Security News
/Research
Wallet-Draining npm Package Impersonates Nodemailer to Hijack Crypto Transactions
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
A gem for plucking GraphQL queries / mutations / fragments defined by heredocs inside .rb
files and exporting them into a json file.
Install this gem and run the following rake task to get the exported json file containing the list of GraphQL queries / mutations / fragments.
bundle exec rake graphql_tag_pluck:generate_graphql_operation_list
With a sample heredoc like the following inside a .rb
file:
SAMPLE_QUERY = <<-GRAPHQL
query SampleQuery {
hoge
fuga {
piyo
}
}
GRAPHQL
will output json file like: (following json content is formatted)
{
"SampleQuery": {
"name": "SampleQuery",
"source": "query SampleQuery {\n hoge\n fuga {\n piyo\n }\n}",
"type": "query"
}
}
by executing
bundle exec rake graphql_tag_pluck:generate_graphql_operation_list
You can configure the following options by creating .graphqltagpluckconfig.yaml
and specifying them inside.
["GRAPHQL", "GQL"]
"#{Dir.pwd}/**/*.rb"
"__generated__/graphql_operation_list.json"
Install the gem and add to the application's Gemfile by executing:
$ bundle add graphql_tag_pluck
The gem is available as open source under the terms of the MIT License.
FAQs
Unknown package
We found that graphql_tag_pluck demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
/Research
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
Security News
This episode explores the hard problem of reachability analysis, from static analysis limits to handling dynamic languages and massive dependency trees.
Security News
/Research
Malicious Nx npm versions stole secrets and wallet info using AI CLI tools; Socket’s AI scanner detected the supply chain attack and flagged the malware.