Research
Security News
Malicious npm Package Targets Solana Developers and Hijacks Funds
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
= Fakebook
Fakebook simulates the Facebook platform, to aid in developing Facebook canvas apps offline. It takes a request and passes it to the app as a POST with the fb_sig_* params added, etc. The response is returned with FBML parsed (sort of) and some chrome added.
In other words: you can work on Facebook canvas apps when you're on a plane.
To use, run 'fakebook' from the command line to start up a Fakebook proxy. For example, if you have an app running on port 3000, and the callback path is "/", and the canvas path is "myapp", you would run:
$ fakebook --callback="http://localhost:3000/" --canvas="myapp"
See "fakebook --help" for more options. By default, Fakebook will look for a config file at ./config/fakebook.yml. The file should look like this:
callback: http://localhost:3000/ canvas: myapp secret: secret user: 1 session: session_key friends: 2, 3, 4 host: 0.0.0.0 port: 5000
You can also use the library directly with the Fakebook class, which eases testing:
require 'fakebook' app = Fakebook.new :callback => "http://localhost:3000/", :canvas => "myapp", :secret => "secret", :fb_params => { :user => 1, :session_key => 'session_key', :friends => [2, 3, 4] } app.request("/")
Because Fakebook implements #call according to the Rack specification[http://rack.rubyforge.org/doc/files/SPEC.html], you can create an HTTP server that proxies to your application using your choice of server library (Mongrel, WEBrick, Thin, etc.) For example:
require 'fakebook' app = Fakebook.new # etc... Rack::Handler::Mongrel.run app, :Port => 5000
== Getting started
To install via RubyGems:
$ sudo gem install sco-fakebook --source http://gems.github.com/
Run the executable to see the available options:
$ fakebook --help
To install the development version from the repository:
$ wget http://github.com/sco/fakebook/tarball/master $ tar -xvf sco-fakebook-master.tar.gz $ cd sco-fakebook-master $ sudo rake install_gem
== Dependencies
Ruby Rack >= 0.3.0
== Author
Scott Raymond sco@scottraymond.net
Thanks to PackRat[http://apps.facebook.com/packrat/], from which this code was extracted.
FAQs
Unknown package
We found that sco-fakebook demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
Security News
Research
Socket researchers have discovered malicious npm packages targeting crypto developers, stealing credentials and wallet data using spyware delivered through typosquats of popular cryptographic libraries.
Security News
Socket's package search now displays weekly downloads for npm packages, helping developers quickly assess popularity and make more informed decisions.