Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
github.com/andreas-jonsson/spirv
Package SPIR-V is a Go encoder/decoder for the Vulkan SPIR-V format. This is based on the preliminary specificationn (pdf) and is subject to change as the specification matures.
Additional SPIR-V information can be found here (pdf) and here. A video lecture on Vulkan and SPIR can be seen here.
By itself, this package is not very useful. All it does is decode SPIR-V binary into sets of 32-bit words data structure and vice-versa. It is intended as a tool to facilitate the creation of SPIR-V debugging tools, compilers, and whatever else you may require.
At the highest level, one can operate on complete modules. They can be loaded, saved and verified to be correct:
module, err := spirv.Load(r)
...
err := module.Verify()
...
err := module.Save(w)
...
The Encoder and Decoder can be used directly if you wish. They offer working with data on a per-instruction basis and if you opt out of deserialization into typed structures, you can examine them without any allocation overhead.
SPIR-V is a binary intermediate language for representing graphical-shader stages and compute kernels for multiple Khronos APIs. Each function in a SPIR-V module contains a control-flow graph (CFG) of basic blocks, with additional instructions and constraints to retain source-code structured flow control.
SPIR-V has the following goals:
go get github.com/andreas-jonsson/spirv
This library was originally written by Jim Teeuwen.
Unless otherwise stated, all of the work in this project is subject to a 1-clause BSD license. Its contents can be found in the enclosed LICENSE file.
FAQs
Unknown package
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.