Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
github.com/art-media-platform/amp.SDK
A fully provisioned solution for files, media, and 3D asset sharing and deployment we can all agree on.
art.media.platform ("Amp") is a potent 3D client-to-infrastructure suite that provides a secure, scalable, and extensible runtime for 3D applications. It supports 3D and media-centric apps with pluggable infrastructure, allowing artists, publishers, creators, and organizations to control asset deployments and experiences within high-fidelity spatial or geographic environments.
Secure, "turn-key" support for:
Seamless integration with Unity and Unreal via an embedded Go native library that your 3D app invokes through convenient bindings — available in the amp.SDK.
A lightweight, stand-alone "headless" native executable and shared library amp.host.lib with tags amp.host that offers federated and decentralized service and storage.
Amp bridges native 3D apps to system, network, and infrastructure services, addressing key challenges:
Traditional file and asset management systems are inadequate for organizing, experiencing, or reviewing hundreds or thousands of assets. Teams often resort to makeshift solutions for collaboration and sharing, compromising efficiency and security.
Teams often collaborate over large file sets but deploy using production systems entirely different from their development workflows. Many sharing and collaboration solutions exist, but they lack first-class spatial linking and native 3D content integration while suffering from inflexible, confining web or OS-based user experiences.
Meanwhile, web-based 3D frameworks like Three.js do not compare to hardware-native Unreal and Unity experiences nor offer a path for real-world asset deployments. For example, 3D experiences often require asset deployments exceeding many gigabytes, which are impossible through a web browser. Worse, web stacks pose many blockers that publishers have little or no ability to address, such as texturing features, performance issues, or animation pain.
art.media.platform is a bridge and toolbox that allows 3D app developers to focus on their core value proposition. It offers rich support for persistent state, user interfaces, and content immersion, allowing apps to break free of web and OS limitations. Teams, organizers, artists, engineers, scientists, and ultimately consumers need better tools to richly and safely share assets.
Previous generations of this work went into production in 2019 to become PLAN 3D. This architecture trajectory, though ambitious, is increasingly recognized as the next inevitable step in the evolution of 3D application building.
In a world where AI-assisted exploits will only worsen, our security model prioritizes security and privacy. It uses nested containers and offers "state-grade" protection — all while the client runtime delivers rich, native 3D experiences for businesses, organizations, and creatives.
This framework offers in-app web browsing that pairs powerfully with spatial linking. Frameworks such as Webview are just another component in the Amp client, allowing your app to have an embedded web browser out of the box. This allows URLs and web experiences to be linked spatially or from multiple map locations.
Geographic and spatial-centric applications such as GIS, CAD, and BIM are everywhere in modern construction and real-time logistics. Amp's 3D client natively integrates maps and locations, allowing you to unify location-based linking, spatially precise environments, and first-class 3D asset integration.
The less obvious value of Amp is its extensibility. The amp.App
interface is flexible and unrestricted, allowing you to expose anything compatible with Go. This means any Go, C, C++, or any native static or dynamic module can be wrapped and push a 3D-native UX (with stock or custom assets).
People with loss of sight, hearing, or motor skills rely on third-party peripherals and software to interact with the world. Amp integrates with most third-party input devices, such as bearing and range sensors for the visually impaired or control sticks for physical limitations.
Amp's tag system is phonetic, AI-friendly, search-friendly, and privacy-friendly. It offers powerful and flexible linking similar to how #hashtags and wikis add value. We see this system as an excellent candidate to become an IEEE standard for markup and hashing.
This repo is lightweight and dependency-free, so it can be added to your project without consequence.
At a high level:
amp.App
.amp.App
, similar to how a library in a C project registers a static or dynamic dependency.amp.host
with your additions embedded within it.amp.host.lib
and add the Amp UX runtime support glue.amp.Host
instantiates registered amp.App
instances as needed. During runtime, amp.host.lib
dispatches URL requests addressed to your app and are "pinned".api.tag.go | Versatile tagging and hash scheme that is AI and search friendly |
api.task.go | Goroutine wrapper inspired by a conventional parent-child process model |
api.app.go | Defines how state is requested, pushed, and merged |
api.host.go | Types and interfaces that amp.Host implements |
FAQs
Unknown package
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.