Research
Security News
Malicious PyPI Package ‘pycord-self’ Targets Discord Developers with Token Theft and Backdoor Exploit
Socket researchers uncover the risks of a malicious Python package targeting Discord developers.
@browser-network/crypto
Advanced tools
A wrapper around eccrypto designed for use in the browser-network ecosystem
This package is just a wrapper around
eccrypto
. It's meant to be used with the
browser network and accompanying browser network apps. It's only for
convenience. If you're looking to bring cryptography into your non browser
network application, you should probably use eccrypto
or another cryptography
library directly instead of using this.
import * as bnc from 'browser-network/crypto'
// Generate a secret (private key) as used by browser-network
const secret = bnc.generateSecret()
// Get the public key mathematically derived from a given secret
const pubKey = bnc.derivePubKey(secret)
// Turn a given string into a `Uint8Array` buffer that eccrypto uses.
const buf = bnc.stob("Serena's ol bus")
// Turn the `Uint8Array` buffer that eccrypto uses into a string for export
const str = bnc.btos(buf) // "Serena's ol bus"
// Create a hash from an object
const has = bnc.hash({ some: 'object' }) // => `Uint8Array`
// Take an object and create a signature for it based on a given private key.
const signature = bnc.sign(secret, { some: 'object' })
// Ensure a signature of object by a pubKey comes from that pubKey's associated secret
const isValid = bnc.verifySignature({ some: 'object' }, signature, pubKey) // true
FAQs
A wrapper around eccrypto designed for use in the browser-network ecosystem
We found that @browser-network/crypto demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers uncover the risks of a malicious Python package targeting Discord developers.
Security News
The UK is proposing a bold ban on ransomware payments by public entities to disrupt cybercrime, protect critical services, and lead global cybersecurity efforts.
Security News
Snyk's use of malicious npm packages for research raises ethical concerns, highlighting risks in public deployment, data exfiltration, and unauthorized testing.