
Research
Malicious npm Packages Impersonate Flashbots SDKs, Targeting Ethereum Wallet Credentials
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
@adamtranquilla/lotide
Advanced tools
A mini clone of the Lodash library.
BEWARE: This library was published for learning purposes. It is not intended for use in production-grade software.
This project was created and published by me as part of my learnings at Lighthouse Labs.
Install it:
npm install @adamtranquilla/lotide
Require it:
const _ = require('@adamtranquilla/lotide');
Call it:
const results = _.tail([1, 2, 3]) // => [2, 3]
The following functions are currently implemented:
head(...)
: returns first item in arraytail(...)
: returns every item after the first in an arraymiddle(...)
: returns the middle item(s) of an arraycountLetters(...)
: counts all letters in a stringcountOnly(...)
: counts only specified letters in a stringeqArrays(...)
: determines if arrays are equivalent in content type and valueeqObjects(...)
: determines if objects are equivalent in content type and valuefindKey(...)
: Finds the keyfindKeyByValue(...)
: Finds the key for a searchable valueflatten(...)
: Flattens a array with nested arraysletterPositions(...)
: Returns the letter position of a target lettermap(...)
: Utilizies mapping CallbakcstakeUntil(...)
: Returns array items up until a target valuewithout(...)
: Removes a target valueFAQs
Collection of useful functions
The npm package @adamtranquilla/lotide receives a total of 0 weekly downloads. As such, @adamtranquilla/lotide popularity was classified as not popular.
We found that @adamtranquilla/lotide demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
Security News
Ruby maintainers from Bundler and rbenv teams are building rv to bring Python uv's speed and unified tooling approach to Ruby development.
Security News
Following last week’s supply chain attack, Nx published findings on the GitHub Actions exploit and moved npm publishing to Trusted Publishers.