
Security News
/Research
Wallet-Draining npm Package Impersonates Nodemailer to Hijack Crypto Transactions
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
@briandamaged/dispatcher
Advanced tools
Flexible Conditional Logic
Here's an example of a programmatically constructed if... else if... else
statement:
const {
Dispatcher,
IF, RETURN,
} = require('js-dispatcher');
const d = Dispatcher();
// Setup our Dispatcher rules:
d.use(IF((x, y)=> x < y, (x, y)=> x + y));
d.use(IF((x, y)=> x > y, (x, y)=> x * y));
d.otherwise((x, y)=> 0);
// Alright, let's put it to the test:
console.log(d(3, 4)); // Output: 7
console.log(d(4, 3)); // Output: 12
console.log(d(3, 3)); // Output: 0
Notice that d.otherwise((x, y)=> 0)
always just returns the value 0
. Since this is a common pattern, you can also write the statement as:
d.otherwise(RETURN(0));
The IF(condition, handler)
function is just a factory for producing a very common type of RULE_FUNCTION
. Specifically, the RULE_FUNCTION
has the form:
function _if(...args) {
if(condition(...args)) {
return handler;
}
}
As you can see, it evaluates the condition(..)
. If this condition returns something truthy, then it returns the associated handler(..)
function. Otherwise, it returns undefined
. This protocol informs the Dispatcher
about whether or not the RULE_FUNCTION
is able to handle the input.
Most of the time, you don't need to worry about this level of detail, and you can just rely upon the IF(..)
factory. But, on rare occassions, both the RULE_FUNCTION
and the handler(..)
function rely upon the same computationally-expensive operation. In these cases, you can write your own RULE_FUNCTION
by hand to minimize computational costs. For example:
function customRule(...args) {
const expensive = someExpensiveCalculation(...args);
if(someCondition(expensive)) {
function handler() {
return doSomethingWith(expensive);
}
return handler;
}
}
d.use(customRule);
FAQs
Command Dispatcher
We found that @briandamaged/dispatcher demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
/Research
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
Security News
This episode explores the hard problem of reachability analysis, from static analysis limits to handling dynamic languages and massive dependency trees.
Security News
/Research
Malicious Nx npm versions stole secrets and wallet info using AI CLI tools; Socket’s AI scanner detected the supply chain attack and flagged the malware.