
Research
Security News
Lazarus Strikes npm Again with New Wave of Malicious Packages
The Socket Research Team has discovered six new malicious npm packages linked to North Korea’s Lazarus Group, designed to steal credentials and deploy backdoors.
Userbin adds real-time monitoring of your authentication stack, instantly notifying you and your users on potential account hijacks.
Add the userbin
gem to your Gemfile
gem 'userbin'
Load and configure the library with your Userbin API secret in an initializer or similar.
Userbin.api_secret = 'YOUR_API_SECRET'
A Userbin client instance will automatically be made available as userbin
in your Rails, Sinatra or Padrino controllers.
track
lets you record the security-related actions your users perform. The more actions you track, the more accurate Userbin is in identifying fraudsters.
When you have access to a logged in user, send along the same user identifier as when you initiated Userbin.js.
userbin.track(
user_id: user.id,
name: 'login.succeeded')
If you don't have access to a logged in user just omit user_id
, typically when tracking failed logins.
userbin.track(name: 'login.failed')
All the available events are:
login.succeeded
login.failed
logout.succeeded
Userbin.configure do |config|
# Same as setting it through Userbin.api_secret
config.api_secret = 'secret'
# Userbin::RequestError is raised when timing out (default: 30.0)
config.request_timeout = 2.0
end
FAQs
Unknown package
We found that userbin demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
The Socket Research Team has discovered six new malicious npm packages linked to North Korea’s Lazarus Group, designed to steal credentials and deploy backdoors.
Security News
Socket CEO Feross Aboukhadijeh discusses the open web, open source security, and how Socket tackles software supply chain attacks on The Pair Program podcast.
Security News
Opengrep continues building momentum with the alpha release of its Playground tool, demonstrating the project's rapid evolution just two months after its initial launch.