
Research
Namastex.ai npm Packages Hit with TeamPCP-Style CanisterWorm Malware
Malicious Namastex.ai npm packages appear to replicate TeamPCP-style Canister Worm tradecraft, including exfiltration and self-propagation.
@appliedblockchain/helpers
Advanced tools
No dependency, single file helpers. Skewed towards ethereum.
npm i @appliedblockchain/helpers
privateKey BufferReturns Buffer ethereum address of provided privateKey.
Returns ethereum address of provided public key.
publicKey BufferReturns Buffer
url stringblockNumberOrTag ("earliest" | "latest" | "pending" | number) (optional, default 'latest')timeout number (optional, default defaultTiemout)Returns Promise<string?> block hash as hex0x string or null from provided ethereum jsonrpc endpoint url in specified timeout; null if timeout has been reached.
Parses string and returns true for "true", "on", "yes" and "1" strings, false otherwise.
value stringReturns boolean
Returns Buffer representation of provided hex (ie. "ff") or hex0x (ie. "0xff") string.
value string
Throws any TypeError On invalid input.
value stringReturns any buffer representation of provided hex string.
value stringReturns Buffer buffer representation of provided hex0x string.
value numberReturns Buffer the smallest buffer representation of provided safe, unsigned integer number. When input is 0 - empty buffer is returned.
message stringresult TReturns function (error: Error): T
Default comparision function.
x anyy anyReturns (-1 | 0 | 1)
Similar to Promise.all but yields after each promise settlement.
Exceptions are captured and results are yielded as [ err, result, i ] tuple.
Returns AsyncGenerator<[Error?, T?, number], any, any>
value stringReturns any input string padded with 0 if length is odd, otherwise returns string as is.
Retries up to n times (roughtly seconds) call to f waiting for true result, which breaks the loop and returns
true. If f didn't return true throws last result value.
Returns Promise<(true | R)>
Yields fibonacci sequence capped to max (default max safe integer).
max number (optional, default defaultMax)Returns void
Type: function (any): boolean
valueReturns any true if value has one or more keys, false otherwise.
Returns Promise<number> Height of the chain from provided ethereum jsonrpc endpoint url or NaN if timeout has been reached or any other problem occured.
value numberReturns string even/byte-padded, hex string representation of a safe, unsigned number.
value numberReturns string 0x-prefixed hex string representation of a safe, unsigned number.
Returns {} transposed entries from xs, indexed by key. Non-unique keys will overwrite previous values.
Non-existing keys will be indexed under undefined key.
Checks if value looks like YYYY-MM-DD date string.
value anyReturns boolean
Returns true if promise has not settled yet, false otherwise.
value Promise<any>Returns boolean
value numberReturns boolean true if value is safe integer greater than zero, false otherwise.
value anyReturns boolean true if value is safe unsigned number, false otherwise.
Type: function (string): Promise<any>
urlReturns any json from basic http(s) get request on url.
Captures extra stack trace, usage await foo().catch(makeRetrace()).
err argument is being modified with new stack value.
Identity function.
Returns {} membership object (set) for provided list of elements (strings).
Like Promise.race but doen't complain about unhandled rejections that happen after race has settled.
Returns Promise<any>
Returns number random unsigned integer that fits 32 bits.
Executes simple shell command.
Computes xs - ys difference in linear time between two, unique, ascending arrays of values. Comparision function can be flipped for descending arrays. Leaks values of arrays in thrown error.
Returns Array<T>
Computes intersection in linear time between two, unique, ascending arrays of values. Comparision function can be flipped for descending arrays. Leaks values of arrays in thrown error.
Returns Array<T>
Expire cached nonces after 12 seconds.
Spread n calls to f function ms milliseconds apart.
Creates monitor similar to setInterval but allows single execution at a time only. Concurrent invocation attempts
are ignored.
Returns any stop function.
milliseconds numbermessage string (optional, default `Timeout of ${String(milliseconds)}ms exceeded.`)code (number | string) (optional, default '@appliedblockchain/helpers/timeout')Returns any cancellable, rejecting timeout promise.
MIT License
Copyright 2019 Applied Blockchain
Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions:
The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software.
THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
FAQs
No dependency, single file helpers.
We found that @appliedblockchain/helpers demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 17 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
Malicious Namastex.ai npm packages appear to replicate TeamPCP-style Canister Worm tradecraft, including exfiltration and self-propagation.

Product
Explore exportable charts for vulnerabilities, dependencies, and usage with Reports, Socket’s new extensible reporting framework.

Product
Socket for Jira lets teams turn alerts into Jira tickets with manual creation, automated ticketing rules, and two-way sync.