Security News
Research
Data Theft Repackaged: A Case Study in Malicious Wrapper Packages on npm
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
MultiBug is a simple error monitoring gem that abstracts multiple reporting tools in one.
To install, run:
gem install multi_bug
Add the following to your Gemfile:
gem "multi_bug", '~> 0.2.2'
After you've added the multi_bug
gem, please install one of the gems for the monitoring platform you want to use.
To accomplish that, you can use one of the following installation guides:
After installing one of the supported gems, reporting of unhandled exceptions should happen automatically and be visible in their respective monitoring dashboard.
Reporting of handled exceptions can be done with:
begin
raise 'Robots are taking over!'
rescue => exception
MultiBug.notify(exception)
end
If you need to add custom payload to the error report you can do this by providing an options hash.
begin
raise 'Robots are taking over!'
rescue => exception
MultiBug.notify(exception, {
foo: {
bar: 'baz'
}
})
end
Changing of the monitoring provider should be easily achieved just by installing/configuring the other gem.
To test, run:
bundle exec rspec
Read Semantic Versioning for details. Briefly, it means:
Read CONTRIBUTING for details.
Copyright 2018 . Read LICENSE for details.
Read CHANGES for details.
FAQs
Unknown package
We found that multi_bug demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Research
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
Research
Security News
Attackers used a malicious npm package typosquatting a popular ESLint plugin to steal sensitive data, execute commands, and exploit developer systems.
Security News
The Ultralytics' PyPI Package was compromised four times in one weekend through GitHub Actions cache poisoning and failure to rotate previously compromised API tokens.