Research
Security News
Malicious npm Package Targets Solana Developers and Hijacks Funds
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
Abstract common routing resource concerns to cut down on duplication.
Code before:
BCX::Application.routes.draw do
resources :calendar_events do
get :past, on: :collection
resources :comments
end
resources :messages { resources :comments }
resources :forwards { resources :comments }
resources :uploads { resources :comments }
resources :documents { resources :comments }
resources :todos { resources :comments }
resources :projects, defaults: { bucket_type: 'project' } do
post :trash, :restore, on: :member
resources :messages, except: [ :new ] do
post :trash, :restore, on: :member
resources :image_attachments, only: :index
end
resources :forwards do
member do
get :content
post :trash, :restore
end
resources :image_attachments, only: :index
end
resources :uploads do
post :trash, :restore, on: :member
resources :image_attachments, only: :index
end
resources :todolists do
get :more, :completed, on: :collection
post :trash, :restore, on: :member
end
resources :todos do
post :toggle, :trash, :restore, on: :member
end
resources :comments do
post :trash, on: :member
resources :image_attachments, only: :index
end
end
end
Code after:
BCX::Application.routes.draw do
concern :commentable do
resources :comments
end
concern :trashable do
post :trash, :restore, on: :member
end
concern :image_attachable do
resources :image_attachments, only: :index
end
resources :calendar_events, concerns: :commentable do
get :past, on: :collection
end
resources :messages, :forwards, :uploads, :documents, :todos, concerns: :commentable
resources :projects, concerns: :trashable, defaults: { bucket_type: 'project' } do
resources :messages, :uploads, :comments, concerns: [:trashable, :image_attachable]
resources :forwards, concerns: [:trashable, :image_attachable] do
get :content, on: :member
end
resources :todolists, concerns: :trashable do
get :more, :completed, on: :collection
end
resources :todos, concerns: :trashable do
post :toggle, on: :member
end
end
end
This plugin was designed as a proof-of-concept for a feature that's destined for Rails 4. It has only been tested on Rails 3.2+, but may work on earlier versions as well.
FAQs
Unknown package
We found that routing_concerns demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
Security News
Research
Socket researchers have discovered malicious npm packages targeting crypto developers, stealing credentials and wallet data using spyware delivered through typosquats of popular cryptographic libraries.
Security News
Socket's package search now displays weekly downloads for npm packages, helping developers quickly assess popularity and make more informed decisions.