
Research
Malicious npm Packages Impersonate Flashbots SDKs, Targeting Ethereum Wallet Credentials
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
Retries database transaction on deadlock and transaction serialization errors. Supports MySQL, PostgreSQL, and SQLite.
The gem works automatically by rescuing ActiveRecord::TransactionIsolationConflict and retrying the transaction.
Add this to your Gemfile:
gem 'transaction_retry'
Then run:
bundle
It works out of the box with Ruby on Rails.
If you have a standalone ActiveRecord-based project you'll need to call:
TransactionRetry.apply_activerecord_patch # after connecting to the database
after connecting to the database.
You can optionally configure transaction_retry gem in your config/initializers/transaction_retry.rb (or anywhere else):
TransactionRetry.max_retries = 3
TransactionRetry.wait_times = [0, 1, 2, 4, 8, 16, 32] # seconds to sleep after retry n
This gem was initially developed for and successfully works in production at Kontomierz.pl - the finest Polish personal finance app.
Run tests on the selected database (mysql2 by default):
db=mysql2 bundle exec rake test
db=postgresql bundle exec rake test
db=sqlite3 bundle exec rake test
Run tests on all supported databases:
./tests
Database configuration is hardcoded in test/db/db.rb; feel free to improve this and submit a pull request.
You should be very suspicious about any gem that monkey patches your stock Ruby on Rails framework.
This gem is carefully written to not be more intrusive than it needs to be:
Released under the MIT license. Copyright (C) 2012 Piotr 'Qertoip' Włodarek.
FAQs
Unknown package
We found that transaction_retry demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
Security News
Ruby maintainers from Bundler and rbenv teams are building rv to bring Python uv's speed and unified tooling approach to Ruby development.
Security News
Following last week’s supply chain attack, Nx published findings on the GitHub Actions exploit and moved npm publishing to Trusted Publishers.