
Security News
/Research
Wallet-Draining npm Package Impersonates Nodemailer to Hijack Crypto Transactions
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
= Rcrawl web crawler for Ruby Rcrawl is a web crawler written entirely in ruby. It's limited right now by the fact that it will stay on the original domain provided.
Rcrawl uses a modular approach to processing the HTML it receives. The link exraction portion of Rcrawl depends on the scrAPI toolkit by Assaf Arkin (http://labnotes.org). gem install scrapi
The structure of the crawling process was inspired by the specs of the Mercator crawler (http://www.cindoc.csic.es/cybermetrics/pdf/68.pdf). A (somewhat) brief overview of the design philosophy follows.
== The Rcrawl process
== Examples
crawler = Rcrawl::Crawler.new(url)
crawler.crawl
== After the crawler is done crawling
crawler.visited_links
crawler.raw_html
crawler.errors
crawler.external_links
crawler.user_agent = "Your fancy crawler name here"
== License Copyright © 2006 Digital Duckies, LLC, under MIT License
Developed for http://digitalduckies.net
News, code, and documentation at http://blog.digitalduckies.net
FAQs
Unknown package
We found that rcrawl demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
/Research
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
Security News
This episode explores the hard problem of reachability analysis, from static analysis limits to handling dynamic languages and massive dependency trees.
Security News
/Research
Malicious Nx npm versions stole secrets and wallet info using AI CLI tools; Socket’s AI scanner detected the supply chain attack and flagged the malware.