
Research
2025 Report: Destructive Malware in Open Source Packages
Destructive malware is rising across open source registries, using delays and kill switches to wipe code, break builds, and disrupt CI/CD.
The task is to develop a basic version of aInstagram. You are only required to develop the API for the system. Below are the details.
You're sections headers will be used to reference location of destination.
The task is to develop a basic version of a Instagram. You are only required to develop the API for the system. Below are the details.
You are required to Design and Develop an HTTP JSON API capable of the following operations,
Create an User
Should be a POST request Use JSON request body URL should be ‘/users' Get a user using id
Should be a GET request Id should be in the url parameter URL should be ‘/users/’ Create a Post
Should be a POST request Use JSON request body URL should be ‘/posts' Get a post using id
Should be a GET request Id should be in the url parameter URL should be ‘/posts/’ List all posts of a user
Should be a GET request URL should be ‘/posts/users/' Additional Constraints/Requirements:
The API should be developed using Go. MongoDB should be used for storage. Only packages/libraries listed here and here can be used. Scoring:
Completion Percentage No. of working endpoints among the ones listed above. Quality of Code Reusability Consistency in naming variables, methods, functions, types Idiomatic i.e. in Go’s style Passwords should be securely stored such they can't be reverse engineered Make the server thread safe Add pagination to the list endpoint Add unit tests


FAQs
Unknown package
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
Destructive malware is rising across open source registries, using delays and kill switches to wipe code, break builds, and disrupt CI/CD.

Security News
Socket CTO Ahmad Nassri shares practical AI coding techniques, tools, and team workflows, plus what still feels noisy and why shipping remains human-led.

Research
/Security News
A five-month operation turned 27 npm packages into durable hosting for browser-run lures that mimic document-sharing portals and Microsoft sign-in, targeting 25 organizations across manufacturing, industrial automation, plastics, and healthcare for credential theft.