Security News
Research
Data Theft Repackaged: A Case Study in Malicious Wrapper Packages on npm
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
Version: 0.0.1
MarchHareMock is a simple mocking library for those using JRuby and the MarchHare gem for RabbitMQ messaging. Inspired by the BunnyMock gem.
MarchHareMock does not cover all of the methods of MarchHare. It currently only mocks the behavior we have required for our immediate needs, which is mainly creating and binding queues and exchanges, and publishing/subscribing messages.
Feel free to fork it to add more behavior mocking and send me a pull request, just "Don't Mock the March Hare":
Warning: This March Hare may mock you!
Add the following to your application's Gemfile:
group :test do
gem 'march_hare_mock'
# ... other gems as necessary
end
And then execute:
bundle install
Or install it into your global gemspace as:
gem install march_hare_mock
Since this project is intended as a simple way to help test your collaboration with MarchHare/RabbitMQ, it does not really opereate as a real queue, but it does support receiving messages into a queue, and reading them out. The main thing to be aware of is that the MarchHareMock::Queue#subscribe
method does not block waiting for messages, consumes all queued messages, and returns when there are no more messages. This differs from the behavior of the real MarchHare.
See the first "integration" test case in spec/lib/march_hare_mock_spec.rb
for a quick example of how to use MarchHareMock.
git checkout -b my-new-feature
)git commit -am 'Add some feature'
)git push origin my-new-feature
)This code is licensed under The MIT License
FAQs
Unknown package
We found that march_hare_mock demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Research
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
Research
Security News
Attackers used a malicious npm package typosquatting a popular ESLint plugin to steal sensitive data, execute commands, and exploit developer systems.
Security News
The Ultralytics' PyPI Package was compromised four times in one weekend through GitHub Actions cache poisoning and failure to rotate previously compromised API tokens.