Security News
Research
Data Theft Repackaged: A Case Study in Malicious Wrapper Packages on npm
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
org.terracotta:terracotta-utilities-port-chooser
Advanced tools
Utility classes for TCP port management
This project contains utility classes that may be used among all Terracotta-OSS projects.
This project operates under the following constraints:
tools
module may not rely on any third-party artifacts other than:
org.slf4j:slf4j-api
com.github.spotbugs:spotbugs-annotations
test-tools
module may rely on test-support artifacts in
common use though these artifacts should generally be optional
for consumers of the test-tools
module. For example, the
following artifacts might be used:
org.hamcrest:hamcrest:2.2
(compile)junit:junit:4.12
(provided)org.testng:testng:6.8
(provided)test-tools
relies makes a breaking change,
introduce new artifact containing the breaking components -- not a
new version of the test-tools
artifact.FAQs
Unknown package
We found that org.terracotta:terracotta-utilities-port-chooser demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Research
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
Research
Security News
Attackers used a malicious npm package typosquatting a popular ESLint plugin to steal sensitive data, execute commands, and exploit developer systems.
Security News
The Ultralytics' PyPI Package was compromised four times in one weekend through GitHub Actions cache poisoning and failure to rotate previously compromised API tokens.