
Research
Malicious npm Packages Impersonate Flashbots SDKs, Targeting Ethereum Wallet Credentials
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
Auto-tumble your RSS feed! (Default: my (Evaryont) pinboard.in links)
$ git clone git://github.com/evaryont/pummel.git
$ cd pummel
$ edit pummel.rb
# Edit the file to point to your choice of RSS feed
$ rackup
# Open your browser to http://localhost:9292/
This web application was designed for Heroku, and is immediately compatible. You can see a demo (and my bookmarks!) at Heroku.
I was just browsing around on the web, aimlessly when I stumbled on the OEmbed project, and subsequently found OohEmbed. The author created a small-ish javascript application called Dumble, which is exactly what Pummel is, but uses a user's del.icio.us bookmarks rather than Pinboard. As I don't really use del.icio.us but instead of pinboard.in, I decided to create my own version.
Here it is.
This is relatively geeky overview of how Pummel works, so if you want to skip it, go right ahead.
At application initiation, an Iconv object is created, and the RSS feed is fetched and parsed.
Every time the index page is requested, loop through each item in the feed, and pull it's link. Check if the link is embeddable. If it is, determine the type and use the correct HTML. (Note: This perhaps should be done by Ruby-OEmbed itself.) If it can not be embedded, create a simple link. If there is an error when embedding, show the error in a <pre> block, and create a simple link.
Every time the refresh page is requested (http://.../refresh) pull the feed again and parse it. Then redirect the user to the index page.
Copyright (C) 2010 Colin Shea. See LICENSE for details.
FAQs
Unknown package
We found that pummel demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
Security News
Ruby maintainers from Bundler and rbenv teams are building rv to bring Python uv's speed and unified tooling approach to Ruby development.
Security News
Following last week’s supply chain attack, Nx published findings on the GitHub Actions exploit and moved npm publishing to Trusted Publishers.