Research
Security News
Quasar RAT Disguised as an npm Package for Detecting Vulnerabilities in Ethereum Smart Contracts
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
@arrowood.dev/socket
Advanced tools
A Node.js Implementation of the Cloudflare Socket API
npm i @arrowood.dev/socket
Requirements:
The formatting, linting, and typechecking of this repo are based off of @vercel/style-guide.
This project uses TypeScript for building. This must be manually executed using:
pnpm build
Output will be in the dist
folder.
This project uses prettier for formatting. Code is formatted automatically when you commit, and you can run the formatter manually using:
pnpm format
All files (except those listed in .prettierignore) will be formatted.
Prettier is configured by .prettierrc.js. It is based on @vercel/style-guide/prettier.
This project uses eslint for linting. Code is linted automatically when you commit, and you can run the linter manually using:
pnpm lint
All files (except those listed in .eslintignore) will be linted.
ESLint is configured by .eslintrc.js. It is based on @vercel/style-guide/eslint/node
This project uses node-tap for testing. Run tests using:
pnpm test
Only test files matching the pattern test/*.test.ts
will be executed.
Testing utility functions should be stored in test/utils.ts
and be well documented.
To manually type-check the repo without producing a build, use:
pnpm type-check
This project uses TypeScript. There exists multiple TypeScript config files; each serves a different purpose.
test
command, and the `type-check`` command.src
directorybuild
command to output JavaScriptFAQs
A Node.js Implementation of the Cloudflare Socket API
We found that @arrowood.dev/socket demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
Security News
Research
A supply chain attack on Rspack's npm packages injected cryptomining malware, potentially impacting thousands of developers.
Research
Security News
Socket researchers discovered a malware campaign on npm delivering the Skuld infostealer via typosquatted packages, exposing sensitive data.