
Research
/Security News
9 Malicious NuGet Packages Deliver Time-Delayed Destructive Payloads
Socket researchers discovered nine malicious NuGet packages that use time-delayed payloads to crash applications and corrupt industrial control systems.
github.com/distcompiler/pgo/systems/raftres
Advanced tools
raftres is a modular composition of the pure Raft protocol and a naive distributed key-value store. This system demonstrates the modular verification and composition of PGo-based systems.
raftres is composed of two models: raft and kv. raft is a pure Raft
protocol without any client interaction semantics. kv is a distributed
key-value store that assumes it has access on an abstract consensus layer.
In the composition, raft and kv communicate using accept and propose
channels. Each raft server accepts new request through its accept channel and
broadcasts committed log entries through its propose channel. kv leverages these
channels and implements a key-value store using them.
Both raft and kv make the same assumptions as the raftkvs systems.
raft only has the five properties from the Raft protocol.
FAQs
Unknown package
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
Socket researchers discovered nine malicious NuGet packages that use time-delayed payloads to crash applications and corrupt industrial control systems.

Security News
Socket CTO Ahmad Nassri discusses why supply chain attacks now target developer machines and what AI means for the future of enterprise security.

Security News
Learn the essential steps every developer should take to stay secure on npm and reduce exposure to supply chain attacks.