Research
Security News
Malicious npm Package Targets Solana Developers and Hijacks Funds
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
github.com/vmelnichenko/json-immutable-xs
Name JSON::Immutable::XS
DESCRIPTION Fast and simple abstract node-tree based storage with JSON support. Usefull for reading JSON configs, keeping it in the memory and don't worrying about mutability. Has XPath-like interface for data accessing. Easy to use with XS and C/C++ modules.
It use RapidJSON as JSON parser. https://rapidjson.org/
SYNOPSIS use JSON::Immutable::XS;
# you can provide this variable to XS and use it there
my $dict = JSON::Immutable::XS->new('example/dict.json');
# get subnode by path ( any node is JSON::Immutable::XS ref)
my $node = $dict->get( 'path', 2, 'node'); # similar to ->{path}[2]{node}
# get() returns undef on not existed path
my $data = $node->get_value('this', 'is', 'the', 'way'); # data could be an any Perl Sv structure ( scalar, hash or array )
# unless path will found - it'll return undef
# it possible to get keys from node as well
for ( @{$dict->keys()} ){
...
}
# use slice to get exactly that you need without unnecessary data ( detail description below )
$dict->slice( 'path' );
# see more features below
PERL INTERFACE new() Creating of new instance. You can provide filename - it will be parsed as JSON
get()
Finding a node by path (may be empty) and returning instance of node as ref 'JSON::Immutable::XS'. May be use any functions of this interface
get_value()
Finding a node by path (may be empty) and returning Perl Sv. It could be Hash or Array or Scalar.
keys()
Get keys of hash for node. Can use path.
exists()
Checking of path existing.
slice()
Get value by path for every key of hash or element of array.
export()
Same as get_value() without path
AUTHOR Vladimir Melnichenko melnichenkovv@gmail.com, Crazy Panda, CP Decision LTD https://github.com/VMELNICHENKO/JSON-Immutable-XS
LICENSE You may distribute this code under the same terms as RapidJSON itself. https://rapidjson.org/
FAQs
Unknown package
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
Security News
Research
Socket researchers have discovered malicious npm packages targeting crypto developers, stealing credentials and wallet data using spyware delivered through typosquats of popular cryptographic libraries.
Security News
Socket's package search now displays weekly downloads for npm packages, helping developers quickly assess popularity and make more informed decisions.