
Research
/Security News
9 Malicious NuGet Packages Deliver Time-Delayed Destructive Payloads
Socket researchers discovered nine malicious NuGet packages that use time-delayed payloads to crash applications and corrupt industrial control systems.
a web framework for fibjs
$ npm i @cub/cub --save
const Cub = require('@cub/cub');
const cub = new Cub();
cub.register(ctx => {
ctx.body = 'Hello World!';
});
cub.listen(8000);
Register function can be invoked many times to accept interceptor. All these registered interceptors will be executed one by one.
cub.register(ctx => {
ctx.body = 'Hello';
});
cub.register(ctx => {
ctx.body += ' World!';
});
If you want to stop running the flowing interceptor, just return false(only false accept) in the current interceptor.
cub.register(ctx => {
ctx.body = 'Hello ';
return false; // only `false` accept
});
cub.register(ctx => {
ctx.body += ' World!';
});
const BaseInterceptor = Cub.BaseInterceptor;
cub.register(new class extends BaseInterceptor {
before (ctx){
ctx.body = 'Hello';
}
after (ctx){
ctx.body += ' World!';
}
});
todo
Cub :
➜ ~ wrk -c100 -t10 -d5 --latency http://127.0.0.1:8000
Running 5s test @ http://127.0.0.1:8000
10 threads and 100 connections
Thread Stats Avg Stdev Max +/- Stdev
Latency 1.91ms 4.09ms 55.16ms 97.72%
Req/Sec 7.11k 1.09k 15.14k 93.07%
Latency Distribution
50% 1.38ms
75% 1.44ms
90% 1.53ms
99% 24.96ms
357495 requests in 5.10s, 41.93MB read
Requests/sec: 70060.74
Transfer/sec: 8.22MB
Koa@2 with Node.js 7.10.0:
➜ ~ wrk -c100 -t10 -d5 --latency http://127.0.0.1:8000
Running 5s test @ http://127.0.0.1:8000
10 threads and 100 connections
Thread Stats Avg Stdev Max +/- Stdev
Latency 6.51ms 1.09ms 20.98ms 91.32%
Req/Sec 1.54k 581.07 14.30k 99.80%
Latency Distribution
50% 6.40ms
75% 6.84ms
90% 7.33ms
99% 9.78ms
76959 requests in 5.10s, 10.94MB read
Requests/sec: 15093.17
Transfer/sec: 2.14MB
express@4 with Node.js 7.10.0:
➜ ~ wrk -c100 -t10 -d5 --latency http://127.0.0.1:8000
Running 5s test @ http://127.0.0.1:8000
10 threads and 100 connections
Thread Stats Avg Stdev Max +/- Stdev
Latency 9.13ms 769.26us 16.17ms 82.08%
Req/Sec 1.10k 61.17 1.21k 74.20%
Latency Distribution
50% 8.94ms
75% 9.38ms
90% 10.05ms
99% 11.95ms
54787 requests in 5.02s, 11.23MB read
Requests/sec: 10920.82
Transfer/sec: 2.24MB
Please open an issue here.
FAQs
a web framework for fibjs
We found that @cub/cub demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
Socket researchers discovered nine malicious NuGet packages that use time-delayed payloads to crash applications and corrupt industrial control systems.

Security News
Socket CTO Ahmad Nassri discusses why supply chain attacks now target developer machines and what AI means for the future of enterprise security.

Security News
Learn the essential steps every developer should take to stay secure on npm and reduce exposure to supply chain attacks.