Research
Security News
Malicious npm Package Targets Solana Developers and Hijacks Funds
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
github.com/accrescent/apkstat
An APK parsing tool and library for Go.
apkstat
is a basic CLI tool for printing APK manifests and binary XML files.
Usage of apkstat:
-apk string
APK to print binary XML from
-xml string
binary XML file to print (Android manifest is default)
-xmlres string
well-known XML resource to print. Must be one of 'network-security' or 'extraction-rules'
-apk
must be specified. If -xml
is specified, apkstat will attempt to print
that file in the APK ZIP hierarchy. If it isn't, apkstat will pretty print the
Android manifest. If -xmlres
is specified, it will pretty print the given XML
resource.
The main entry point for apkstat is the APK type, which you can create an
instance of with the apk.Open
and apk.OpenWithConfig
functions.
If you need to do lower-level parsing (which is usually unnecessary), you can
open resource tables and Android binary XML files directly with NewResTable()
and NewXMLFile()
respectively.
Example usage:
package main
import (
"fmt"
"github.com/accrescent/apkstat"
)
func main() {
apk, err := apk.Open("accrescent.apk")
if err != nil {
panic(err)
}
manifest := apk.Manifest()
fmt.Println("App ID:", manifest.Package)
fmt.Println("App version code:", manifest.VersionCode)
fmt.Println("App version name:", manifest.VersionName)
for _, p := range *manifest.UsesPermissions {
fmt.Println("Requested permission:", p.Name)
}
}
apkstat is licensed under the ISC license. However, parts of it are based on code from the Android Open Source Project and the androidbinary library by Ichinose Shogo which are licensed under the Apache 2.0 and MIT licenses respectively.
FAQs
Unknown package
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
Security News
Research
Socket researchers have discovered malicious npm packages targeting crypto developers, stealing credentials and wallet data using spyware delivered through typosquats of popular cryptographic libraries.
Security News
Socket's package search now displays weekly downloads for npm packages, helping developers quickly assess popularity and make more informed decisions.