
Research
/Security News
11 Malicious Go Packages Distribute Obfuscated Remote Payloads
Socket uncovered 11 malicious Go packages using obfuscated loaders to fetch and execute second-stage payloads via C2 domains.
github.com/CrossCopy/clipboard
NPM Package: https://www.npmjs.com/package/@crosscopy/clipboard
GitHub: https://github.com/crosscopy/clipboard
This is a clipboard API npm package that allows you to copy and paste data to and from the clipboard. There doesn't seem to be a good clipboard package for node.js (that supports data format beyond text), so I decided to make one. Data Format Supported
- Text
- Image
- Rich Text Format
- Files
- HTML
Detailed API function declarations can be found in the index.d.ts.
Or you can refer to the source code in src/lib.rs.
import Clipboard from "@crosscopy/clipboard";
console.log(await Clipboard.getText());
console.log(await Clipboard.getHtml());
if (await Clipboard.hasImage()) {
console.log(await Clipboard.getImageBase64());
} else {
console.log("No Image");
}
A clipboard listener will be added soon for monitoring clipboard changes and get notified when the clipboard content changes.
Everything is done with GitHub Action.
Run npm version patch
to bump the version.
Then git push --follow-tags
to push the changes and tags to GitHub. GitHub Action will automatically build and publish.
FAQs
Unknown package
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
/Security News
Socket uncovered 11 malicious Go packages using obfuscated loaders to fetch and execute second-stage payloads via C2 domains.
Security News
TC39 advances 11 JavaScript proposals, with two moving to Stage 4, bringing better math, binary APIs, and more features one step closer to the ECMAScript spec.
Research
/Security News
A flawed sandbox in @nestjs/devtools-integration lets attackers run code on your machine via CSRF, leading to full Remote Code Execution (RCE).