Research
Security News
Quasar RAT Disguised as an npm Package for Detecting Vulnerabilities in Ethereum Smart Contracts
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
github.com/tporadowski/redis
You can find the release of Redis 5.0.14 for Windows on releases page. Please test it and report any issues, thanks in advance!
You can find the release of Redis 4.0.14 for Windows on releases page. Please test it and report any issues, thanks in advance!
DISCLAIMER
At the moment win-4.0.14 branch provides a stable port of Redis 4.0.14 for Windows x64 and win-5.0 branch provides a stable port of Redis 5.0.14 for Windows x64, both merged with archived port of win-3.2.100 version from MS Open Tech team. Since the latter is no longer maintained - the sources were merged by hand, projects updated to Visual Studio 2019 (v16.2.5) and any findings (mostly via unit tests) were fixed.
You can find the original description of what this fork provides, how it evolved, what are its requirements, etc. on Wiki: https://github.com/tporadowski/redis/wiki/Old-MSOpenTech-redis-README.md
Building from source code
In order to build this project from source code you need to have:
src/mkreleasehdr.sh
script that creates src/release.h
with some information taken from Git; optionally you can create that file by hand.Dependencies
This project depends on jemalloc
memory allocator, which is slightly customized
in regard to calls to VirtualAlloc
and VirtualFree
WinAPI functions. They are being replaced with calls to AllocHeapBlock/PurgePages
and FreeHeapBlock
from src/Win32_Interop/Win32_QFork.cpp
in order to keep track which memory regions are to be made
available to child processes (for saving RDB/AOF).
Changes to jemalloc
that provide those customizations are being maintained in tporadowski/jemalloc repository
and are copied over to deps/jemalloc
.
FAQs
Unknown package
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
Security News
Research
A supply chain attack on Rspack's npm packages injected cryptomining malware, potentially impacting thousands of developers.
Research
Security News
Socket researchers discovered a malware campaign on npm delivering the Skuld infostealer via typosquatted packages, exposing sensitive data.