
Research
Malicious npm Packages Impersonate Flashbots SDKs, Targeting Ethereum Wallet Credentials
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
github.com/financial-times/uuid-utils-go
This ia a library containing UUID generation and validation used in UPP's Golang services.
Generating an UUID based on another UUID: methods in deriveUUID.go
Generating an UUID from an random string (V3 version, i.e. using MD5 hashing): methods in generateV3UUID.go
Generating an UUID from an URL (V5 version, i.e. using SHA1 hashing): methods in generateV5UUID.go
Validating an UUID: methods in uuidValidation.go
Note: this library also contains methods that replicate java.util.UUID class (in uuid.go), for cases where it's already in use.
Import the library (in your code):
import (
uuidutils "github.com/Financial-Times/uuid-utils-go"
)
Vendor it (e.g. with govendor):
govendor fetch github.com/Financial-Times/uuid-utils-go@1.0.0
Note1: this assumes your repo is already vendored (i.e. you ran: govendor init)
Note2: change in the fetch example above the appropriate tag release you want: @x.y.z
Generating an UUID based on another UUID:
originalUUID, _ := uuidutils.NewUUIDFromString("0000ea79-00a5-504e-a28d-11bd108b35ac")
uuidDeriver := uuidutils.NewUUIDDeriverWith(uuidutils.IMAGE_SET)
derivedUUID := uuidDeriver.From(originalUUID)
revertToOriginalUUID := uuidDeriver.From(derivedUUID)
Generating an UUID from an random string (V3 version, i.e. using MD5 hashing):
someString := "1AB23ad1x34"
generatedUUID := uuidutils.NewV3UUID(someString)
Generating an UUID from an URL (V5 version, i.e. using SHA1 hashing):
someString := "1AB23ad1x34"
generatedUUID := uuidutils.NewDoubleDigestedV3UUID(someString)
Validating an UUID:
someUUID := "0000ea79-00a5-504e-a28d-11bd108b35ac"
err := ValidateUUID(validUUID)
if err != nil {
// do something with the error
}
FAQs
Unknown package
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.

Security News
Ruby maintainers from Bundler and rbenv teams are building rv to bring Python uv's speed and unified tooling approach to Ruby development.

Security News
Following last week’s supply chain attack, Nx published findings on the GitHub Actions exploit and moved npm publishing to Trusted Publishers.