Research
Security News
Malicious npm Package Targets Solana Developers and Hijacks Funds
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
ROMA is one of the data storing systems for distributed key-value stores.
It is a completely decentralized distributed system that consists of multiple
processes, called nodes, on several machines. It is based on pure P2P architecture
like a distributed hash table, thus it provides high availability and scalability.
ROMA is written in Ruby. However, following choices are available to access to ROMA.
More information is here.
You can simply install ROMA and dependency libralies by using a "gems" command of Ruby as follows.
$ gem install roma
ROMA is required to make the routing files before starting up.
The routing file is stored the routing information of each processes.
$ mkroute localhost_10001 localhost_10002 --replication_in_host
If succeeded, two new files which named localhost_10001.route and localhost_10002.route created in the current directory.
Refer to Commands for more detail information about Shell Commands.
Run two processes by using a romad.rb program as follows:
$ romad localhost -p 10001 -d --replication_in_host
$ romad localhost -p 10002 -d --replication_in_host
Refer to Commands for more detail information about Shell Commands.
Like memcached, you can connect to ROMA with telnet. Connect to the ROMA process that you ran above.
$ telnet localhost 10001
You can interact with ROMA in the same way of memcached commands.
set foo 0 0 3 <return>
bar <return>
STORED
get foo <return>
VALUE foo 0 3
bar
END
Refer to Commands for more detail information about ROMA Commands.
If you would like to contribute, please...
ruby test/run_test.rb
(if unit test fails, run it again - it's fickle).Contributions, improvements, comments and suggestions are welcome!
Roma is promoted by Rakuten, Inc. and Rakuten Institute of Technology.
FAQs
Unknown package
We found that roma demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 3 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
Security News
Research
Socket researchers have discovered malicious npm packages targeting crypto developers, stealing credentials and wallet data using spyware delivered through typosquats of popular cryptographic libraries.
Security News
Socket's package search now displays weekly downloads for npm packages, helping developers quickly assess popularity and make more informed decisions.