
Security News
/Research
Wallet-Draining npm Package Impersonates Nodemailer to Hijack Crypto Transactions
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
Install gem from github
, by adding the gem line into the Gemfile as follows:
gem 'ntp-mock-server', github: 'dmcnulla/ntp'
And then execute:
$ bundle
Or install it yourself as:
$ gem install flickr_oblak
Add to your script:
require 'ntp' # NOTE it automatically includes 'net/ntp' gem
# create a new server instance
server = NTP::Server::Control.new
# starting the server on 12345-th port.
server.start(12345)
# => "started NTP mock server on localhost:12345."
# get a time from the server
Net::NTP::get('127.0.0.1', 12345).time # => time...
# set base time for the server
server.time("2000/01/01 01:00")
# get a new rebased time from the server
Net::NTP::get('127.0.0.1', 12345).time # => "2000/01/01 01:05"
# stop the server. NOTE since the server is bind to another process, it shall be explicitly stopped.
server.stop
# => "stopped"
You can control the server by using a command line interface as follows:
# start the server
$ ntp-mock-server start
# setb server's base time
$ ntp-mock-server time "2000/01/01 01:00"
# stop the server
$ ntp-mock-server stop
Issue the CLI application without a command to view all available ones:
$ ntp-mock-server
Usage: ntp-mock-server [start|stop|restart|status|time <time>|reset]
git checkout -b my-new-feature
)git commit -am 'Add some feature'
)git push origin my-new-feature
)See LICENSE.txt
file.
FAQs
Unknown package
We found that ntp-mock-server demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
/Research
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
Security News
This episode explores the hard problem of reachability analysis, from static analysis limits to handling dynamic languages and massive dependency trees.
Security News
/Research
Malicious Nx npm versions stole secrets and wallet info using AI CLI tools; Socket’s AI scanner detected the supply chain attack and flagged the malware.