Research
Security News
Quasar RAT Disguised as an npm Package for Detecting Vulnerabilities in Ethereum Smart Contracts
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
github.com/songgao/gallery
gallery
exposes a local gallery as a web gallery. It uses lightbox2
(http://lokeshdhakar.com/projects/lightbox2/) to present images.
All images (*.jpg
, *.jpeg
, *.png
, *.gif
) in the folder are scaned
recursively and indexed. Images are indexed by SHA-1 of [absolute path of the
image file] and [modification time of the image file]. gallery
watches the
image folder and re-indexes when the modification time of the folder changes
There are three sizes for each image: Thumbnail (width = 240px), Large (width = 1024), and Original. Thumbnail and Large are cached in groupcache
(https://github.com/golang/groupcache) while Original is always loaded from hard drive. 32 MB and 128 MB are allocated for Thumbnails and Larges respectively.
go get -u github.com/songgao/gallery
Usage of gallery:
-image="": path to the folder that has images (supported formats: .jpg, .png, .gif)
-laddr="localhost:7428": http listening address
gallery -image=/path/to/image/folder -laddr=localhost:7428
FAQs
Unknown package
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
Security News
Research
A supply chain attack on Rspack's npm packages injected cryptomining malware, potentially impacting thousands of developers.
Research
Security News
Socket researchers discovered a malware campaign on npm delivering the Skuld infostealer via typosquatted packages, exposing sensitive data.