Research
Security News
Malicious npm Package Targets Solana Developers and Hijacks Funds
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
icu.nullptr.stringfuck:plugin
Advanced tools
一个字符串混淆器,旨在防止被 jadx、MT 等工具一键解密
目前还很简陋,只能简单骗过反编译器(毕竟纯 Java)
可能存在不少 bug,只是个玩具,不适用于生产环境
plugins {
id("icu.nullptr.stringfuck") version "0.2.2"
}
dependencies {
implementation("icu.nullptr.stringfuck:library:0.2.2")
}
stringFuck {
// 解密密钥,ByteArray 类型
key = xxx
// 或使用 setKey(String)
// 编译时是否输出调试信息
isPrintDebugInfo = false
// 是否在 debug buildType 中使用
isWorkOnDebug = false
// 是否使用白名单模式
// 若不启用,StringFuck 只会混淆以列表中开头的类
// 若启用,StringFuck 会混淆以列表中开头以外的所有类
isWhiteList = false
// 混淆列表
obfuscationList = setOf("icu.nullptr")
// 自定义加密方法,类型 ((String) -> ByteArray)?,设置为空则使用默认 Xor 方案
encryptMethod = null
// 自定义解密类完整类名,设置为空则使用默认 Xor 方案
decryptMethodClassPath = null
}
StringFuck.init();
FAQs
Unknown package
We found that icu.nullptr.stringfuck:plugin demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
Security News
Research
Socket researchers have discovered malicious npm packages targeting crypto developers, stealing credentials and wallet data using spyware delivered through typosquats of popular cryptographic libraries.
Security News
Socket's package search now displays weekly downloads for npm packages, helping developers quickly assess popularity and make more informed decisions.