Research
Security News
Malicious npm Package Targets Solana Developers and Hijacks Funds
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
github.com/gijsbers/go-pcre
This is a Go language package providing support for Perl Compatible Regular Expressions (PCRE).
Install the package for Debian as follows:
sudo apt-get install libpcre++-dev
go get github.com/gijsbers/go-pcre
Go programs that depend on this package should import this package as follows to allow automatic downloading:
import "github.com/gijsbers/go-pcre"
This is a clone of golang-pkg-pcre by Florian Weimer, which has been placed on Github by Glenn Brown, so it can be fetched automatically by Go's package installer.
Glenn Brown added FindIndex()
and ReplaceAll()
to mimic functions in Go's default regexp package.
Mathieu Payeur Levallois added Matcher.ExtractString()
.
Malte Nuhn added GroupIndices()
to retrieve positions of a matching group.
Chandra Sekar S added Index()
and stopped invoking Match()
twice in FindIndex()
.
Misakwa added support for pkg-config
to locate libpcre
.
Yann Ramin added ReplaceAllString()
and changed Compile()
return type to error
.
Nikolay Sivko modified name2index()
to return error instead of panic.
Harry Waye exposed raw pcre_exec
.
Hazzadous added partial match support.
Pavel Gryaznov added support for JIT compilation.
FAQs
Unknown package
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
Security News
Research
Socket researchers have discovered malicious npm packages targeting crypto developers, stealing credentials and wallet data using spyware delivered through typosquats of popular cryptographic libraries.
Security News
Socket's package search now displays weekly downloads for npm packages, helping developers quickly assess popularity and make more informed decisions.