
Research
/Security News
Malicious npm Packages Target WhatsApp Developers with Remote Kill Switch
Two npm packages masquerading as WhatsApp developer libraries include a kill switch that deletes all files if the phone number isn’t whitelisted.
@arrows/string
Advanced tools
The purpose of the library is to provide functional wrappers for String.prototype methods
and provide some additional functions for common tasks.
All wrappers try to mimic original methods as close as possible while providing composable, auto-curried versions of the string methods.
For convenience, some functions have additional methods to execute the most common use cases of the function.
Functions that do not have a native equivalent contain _
suffix. That way we can implement native-like version in the future (if an equivalent method will be added to the language), without potentially breaking backward-compatibility of the library.
The library has built-in type definitions, which provide an excellent IDE support.
Via NPM:
npm i @arrows/string
Via Yarn:
yarn add @arrows/string
All modules can be imported independently (to reduce bundle size), here are some import methods (you can use either CommonJS or ES modules):
import arr from '@arrows/string'
import { charAt } from '@arrows/string'
import charAt from '@arrows/string/charAt'
Functional wrapper for String.prototype.charAt
Retrieves the character at the specified index.
index
Specific indexstr
Initial stringReturns: Character or empty string if out of bound.
Project is under open, non-restrictive ISC license.
FAQs
Functional tools for JS strings
The npm package @arrows/string receives a total of 0 weekly downloads. As such, @arrows/string popularity was classified as not popular.
We found that @arrows/string demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
/Security News
Two npm packages masquerading as WhatsApp developer libraries include a kill switch that deletes all files if the phone number isn’t whitelisted.
Research
/Security News
Socket uncovered 11 malicious Go packages using obfuscated loaders to fetch and execute second-stage payloads via C2 domains.
Security News
TC39 advances 11 JavaScript proposals, with two moving to Stage 4, bringing better math, binary APIs, and more features one step closer to the ECMAScript spec.