
Research
/Security News
9 Malicious NuGet Packages Deliver Time-Delayed Destructive Payloads
Socket researchers discovered nine malicious NuGet packages that use time-delayed payloads to crash applications and corrupt industrial control systems.
Welcome to GoConvey, a yummy Go testing tool for gophers. Works with go test. Use it in the terminal or browser according to your viewing pleasure. View full feature tour.
Features:
go testYou can ask questions about how to use GoConvey on StackOverflow. Use the tags go and goconvey.
Menu:
$ go get github.com/smartystreets/goconvey
Make a test, for example:
package package_name
import (
"testing"
. "github.com/smartystreets/goconvey/convey"
)
func TestSpec(t *testing.T) {
// Only pass t into top-level Convey calls
Convey("Given some integer with a starting value", t, func() {
x := 1
Convey("When the integer is incremented", func() {
x++
Convey("The value should be greater by one", func() {
So(x, ShouldEqual, 2)
})
})
})
}
Start up the GoConvey web server at your project's path:
$ $GOPATH/bin/goconvey
Then watch the test results display in your browser at:
http://localhost:8080
If the browser doesn't open automatically, please click http://localhost:8080 to open manually.
There you have it.
As long as GoConvey is running, test results will automatically update in your browser window.
The design is responsive, so you can squish the browser real tight if you need to put it beside your code.
The web UI supports traditional Go tests, so use it even if you're not using GoConvey tests.
Just do what you do best:
$ go test
Or if you want the output to include the story:
$ go test -v
Check out the

For web UI and terminal screenshots, check out the full feature tour.
GoConvey is brought to you by SmartyStreets and several contributors (Thanks!).
FAQs
Unknown package
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
Socket researchers discovered nine malicious NuGet packages that use time-delayed payloads to crash applications and corrupt industrial control systems.

Security News
Socket CTO Ahmad Nassri discusses why supply chain attacks now target developer machines and what AI means for the future of enterprise security.

Security News
Learn the essential steps every developer should take to stay secure on npm and reduce exposure to supply chain attacks.