
Security News
/Research
Wallet-Draining npm Package Impersonates Nodemailer to Hijack Crypto Transactions
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
Simple stupid captcha, use it with flash.
create file config/stupid_captcha.rb and set StupidCaptcha settings
use rake secret to generate some good salt
if defined?(StupidCaptcha)
StupidCaptcha.setup do |config|
# salt, use rake secret to generate goog salt
config.salt = "5b213328a3ed873013c553f15......."
# fonts path, point to directory, default GEM_RROT/assets/fonts
config.fonts_path = Rails.root.join('artwork/fonts').to_s
# set fonts array directly (fonts_path is not used), you can find default fonts in GEM_RROT/assets/fonts
config.fonts = [
Rails.root.join('artwork/fonts/1.ttf').to_s
]
# backgrounds path, point to directory, default GEM_RROT/assets/backgrounds
config.backgrounds_path = Rails.root.join('artwork/backgrounds').to_s
# set backgrounds array directly (backgrounds_path is not used), you can find default fonts in GEM_RROT/assets/backgrounds
config.backgrounds = [
Rails.root.join('artwork/backgrounds/1.png').to_s
]
# colors
config.colors = %w{black}
end
end
require 'base64'
class CaptchaController < ApplicationController
def index
c = StupidCaptcha::Captcha.new
c.reset
respond_to do |wants|
wants.json do
render text: {
id: c.hash,
img: Base64.encode64(c.to_blob)
}.to_json
end
end
end
end
class DataController < ApplicationController
def create
@data = Data.new(params[:data])
respond_to do |wants|
if StupidCaptcha::Captcha.new.check(params[:captcha_id], params[:captcha_input]) && @data.save
flash[:notice] = 'Data was successfully created.'
wants.html { redirect_to(@data) }
wants.xml { render :xml => @data, :status => :created, :location => @data }
else
wants.html { render :action => "new" }
wants.xml { render :xml => @data.errors, :status => :unprocessable_entity }
end
end
end
end
get '/captcha', :controller => "captcha", :action => 'index'
post '/data' , :controller => "data" , :action => 'create'
Looking for help?
email to me: lisukorin [at] gmail [dot] com,
don't forget write 'stupid captcha' in subject or my mail client will treat your message as spam.
FAQs
Unknown package
We found that stupid_captcha demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
/Research
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
Security News
This episode explores the hard problem of reachability analysis, from static analysis limits to handling dynamic languages and massive dependency trees.
Security News
/Research
Malicious Nx npm versions stole secrets and wallet info using AI CLI tools; Socket’s AI scanner detected the supply chain attack and flagged the malware.