
Research
Two Malicious Rust Crates Impersonate Popular Logger to Steal Wallet Keys
Socket uncovers malicious Rust crates impersonating fast_log to steal Solana and Ethereum wallet keys from source code.
rack-request-profiler
Advanced tools
This project provides a simple "framework" for profiling request / response times, and sending the data to another service. It includes a base class Rack::RequestProfiler
for handling the logic of wrapping and timing the request / response cycle in a rack app.
By default, the Rack::RequestProfiler
middleware does not do anything with the profiling data. Instead, this logic must be implemented by subclasses by defining the handle_results
instance method. For example, you might send profiling data to an external web service (stathat, papertrail, loggly, etc), statsd, write to a logfile on disk, put it in a persistent store like redis or mongo, or really anything else your heart desires.
This project currently provides profiler middlewares for stathat and statsd. If you'd like to contribute a profiler middleware, pull requests are welcome.
gem install rack-request_profiler
Simply include one of the profiler middlewares into the middleware stack in any rack-compatible application like so:
use Rack::Profilers::Statsd, Statsd.new('localhost'), :ignore_path => /^\/assets/
Be default, we match URL's that look like BSON ids. You can over-ride this regular expression like this:
Rack::Utils::UrlStripper.id_pattern = /some_other_pattern/
FAQs
Unknown package
We found that rack-request-profiler demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Socket uncovers malicious Rust crates impersonating fast_log to steal Solana and Ethereum wallet keys from source code.
Research
A malicious package uses a QR code as steganography in an innovative technique.
Research
/Security News
Socket identified 80 fake candidates targeting engineering roles, including suspected North Korean operators, exposing the new reality of hiring as a security function.