Research
Security News
Malicious npm Package Targets Solana Developers and Hijacks Funds
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
github.com/ronaldcrb/diving-decompression-go
this package is under construction, it is NOT suitable for usage in real dive operations neither commercial nor recreational, as we need to make extensive test and audit the package reliability. it is not only a matter of applying unit testing as this calculations are crucial for divers safety; also regardless of the extensive tests and trials in humans performed by the US Navy along the years with regards of decompression sickness, it has been stated many times by relevant stakeholders that these trials do not necessarily entail 100% accuracy on the results of undertaking dive operations within the constraints of these dive tables. there are many factors that are not taken into consideration (e.g: water temperature, diver physiological fitness, unadverted PFOs... to name a few).
the main source for this module is the US Navy Diving Manual, which is the most comprehensive resource for educational and operational reference in the diving industry. you can find a copy of the 7th revision of this manual in this repository
this project makes use of Go Modules, and it is intended to be used as an external library to any Go project.
To be done
to develop a series of return objects with the specific guidelines that are relevant to the specific dive profile introduced.
to develop a series of graphical charts to represent the decompression profiles.
to develop a series of specific errors and warning objects relevant to the profile introduced.
FAQs
Unknown package
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
Security News
Research
Socket researchers have discovered malicious npm packages targeting crypto developers, stealing credentials and wallet data using spyware delivered through typosquats of popular cryptographic libraries.
Security News
Socket's package search now displays weekly downloads for npm packages, helping developers quickly assess popularity and make more informed decisions.