
Security News
/Research
Wallet-Draining npm Package Impersonates Nodemailer to Hijack Crypto Transactions
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
A Ruby client library for interacting with Supermicro BMC (Baseboard Management Controller) via the Redfish API.
This gem provides a Ruby interface to manage Supermicro servers through their BMC, offering the same functionality as the iDRAC gem but for Supermicro hardware:
Add to your Gemfile:
gem 'supermicro'
Or install directly:
gem install supermicro
require 'supermicro'
# Create a client
client = Supermicro.new(
host: '192.168.1.100',
username: 'admin',
password: 'password',
verify_ssl: false
)
# Or use block form with automatic session cleanup
Supermicro.connect(
host: '192.168.1.100',
username: 'admin',
password: 'password'
) do |client|
# Your code here
puts client.power_status
end
# Check power status
status = client.power_status # => "On" or "Off"
# Power operations
client.power_on
client.power_off
client.power_restart
client.power_cycle
# Get system information
info = client.system_info
# Get CPU information
cpus = client.cpus
# Get memory information
memory = client.memory
# Get storage summary
storage = client.storage_summary
# Get thermal information
fans = client.fans
temps = client.temperatures
# Check virtual media status
media = client.virtual_media_status
# Mount an ISO
client.insert_virtual_media("http://example.com/os.iso")
# Unmount all media
client.unmount_all_media
# Mount ISO and set boot override
client.mount_iso_and_boot("http://example.com/os.iso")
# Get boot options
options = client.boot_options
# Set one-time boot override
client.set_boot_override("Pxe", persistent: false)
# Quick boot methods
client.boot_to_pxe
client.boot_to_disk
client.boot_to_cd
client.boot_to_bios_setup
# Get BIOS attributes
attrs = client.bios_attributes
# Set BIOS attribute
client.set_bios_attribute("QuietBoot", "Enabled")
# Reset BIOS to defaults
client.reset_bios_defaults
host
: BMC IP address or hostnameusername
: BMC usernamepassword
: BMC passwordport
: BMC port (default: 443)use_ssl
: Use HTTPS (default: true)verify_ssl
: Verify SSL certificates (default: false)direct_mode
: Use Basic Auth instead of sessions (default: false)retry_count
: Number of retries for failed requests (default: 3)retry_delay
: Initial delay between retries in seconds (default: 1)Enable verbose output:
client.verbosity = 1 # Basic debug output
client.verbosity = 2 # Include request/response details
client.verbosity = 3 # Include full stack traces
Tested with:
While the API is similar to the iDRAC gem, there are some Supermicro-specific differences:
/Systems/1
) instead of Dell's embedded namesRun the test suite:
bundle exec rspec
Or with specific tests:
bundle exec rspec spec/supermicro_spec.rb
After checking out the repo, run bundle install
to install dependencies. Then, run bundle exec rspec
to run the tests.
To install this gem onto your local machine, run bundle exec rake install
. To release a new version, update the version number in version.rb
, and then run bundle exec rake release
, which will create a git tag for the version, push git commits and tags, and push the .gem
file to rubygems.org.
Bug reports and pull requests are welcome on GitHub at https://github.com/buildio/supermicro.
MIT
FAQs
Unknown package
We found that supermicro demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
/Research
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
Security News
This episode explores the hard problem of reachability analysis, from static analysis limits to handling dynamic languages and massive dependency trees.
Security News
/Research
Malicious Nx npm versions stole secrets and wallet info using AI CLI tools; Socket’s AI scanner detected the supply chain attack and flagged the malware.