
Security News
/Research
Wallet-Draining npm Package Impersonates Nodemailer to Hijack Crypto Transactions
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
Schleuder is a gpg-enabled mailing list manager with resending-capabilities. Subscribers can communicate encrypted (and pseudonymously) among themselves, receive emails from non-subscribers and send emails to non-subscribers via the list.
It aims to be robust, flexible, internationalized and also provides an API for the optional web interface called schleuder-web.
For more details see https://schleuder.org/docs/.
If you use Debian buster, CentOS 7 or Archlinux, please have a look at the installation docs. We do provide packages for those platforms, which simplify the installation a lot.
We recommend to also run a random number generator like haveged. This ensures Schleuder won't be blocked by lacking entropy, which otherwise might happen especially during key generation.
Additionally these rubygems are required (will be installed automatically unless present):
Download the gem and the OpenPGP-signature and verify:
gpg --recv-key 0xB3D190D5235C74E1907EACFE898F2C91E2E6E1F3
gpg --verify schleuder-5.0.0.gem.sig
If all went well install the gem:
gem install schleuder-5.0.0.gem
Set up schleuder:
schleuder install
This creates necessary directories, copies example configs, etc. If you see errors about missing write permissions please follow the advice given.
For further information on setup and configuration please read https://schleuder.org/schleuder/docs/server-admins.html.
See schleuder help
.
E.g.:
Commands:
schleuder check_keys # Check all lists for unusable or expiring keys and send the results to the list-admins. (This is supposed...
schleuder help [COMMAND] # Describe available commands or one specific command
schleuder install # Set up Schleuder initially. Create folders, copy files, fill the database, etc.
schleuder version # Show version of schleuder
schleuder work list@hostname < message # Run a message through a list.
Please use schleuder-cli to create and manage lists from the command line.
Optionally consider installing schleuder-web, the web interface for schleuder. It enables list-admins to manage their lists through the web instead of using request-keywords.
See https://0xacab.org/schleuder/schleuder/issues.
We use rspec to test our code. To setup the test environment run:
SCHLEUDER_ENV=test SCHLEUDER_CONFIG=spec/schleuder.yml bundle exec rake db:init
To execute the test suite run:
bundle exec rspec
We are working on extendig the test coverage.
Please see CONTRIBUTING.md.
Please see MISSION_STATEMENT.md.
We adopted a code of conduct. Please read CODE_OF_CONDUCT.md.
GNU GPL 3.0. Please see LICENSE.txt.
Alternatively to the gem-files you can download the latest release as a tarball and its OpenPGP-signature.
FAQs
Unknown package
We found that schleuder demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
/Research
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
Security News
This episode explores the hard problem of reachability analysis, from static analysis limits to handling dynamic languages and massive dependency trees.
Security News
/Research
Malicious Nx npm versions stole secrets and wallet info using AI CLI tools; Socket’s AI scanner detected the supply chain attack and flagged the malware.