Research
Security News
Malicious npm Package Targets Solana Developers and Hijacks Funds
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
github.com/ik5/gostrutils
The following repo is a collection of string functions I have created over the years, and slowly moving them to a single package, helping me and others to enjoy them, and stop inventing the wheel every project.
Package gostrutils contains string utilities that are missing from the main strings package, as well as other encoding packages arrives by go.
The implementation of the package is set by files based on a subject that belong to.
The basic logic of Go, is to use bytes as a non numeric holder. The basics of the following package is to gain the ability to hold more support for string based on functions that are missing, while remembering that Go's strings are UTF-8.
The project itself built with files that holds the subject of what they are doing.
The helpers.go file, holds functions that are not string related functions, but help creating that string support.
The aim of the following library is to have close to 100% of unit test coverage, and also examples for all existed functions.
The package built to support golang standard library, for minimizing dependencies. There is no use of any 3rd party packages when using this package, and every contribution to the project must also take that in consideration.
The Following project released under MIT.
FAQs
Unknown package
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
Security News
Research
Socket researchers have discovered malicious npm packages targeting crypto developers, stealing credentials and wallet data using spyware delivered through typosquats of popular cryptographic libraries.
Security News
Socket's package search now displays weekly downloads for npm packages, helping developers quickly assess popularity and make more informed decisions.