
Research
Malicious npm Packages Impersonate Flashbots SDKs, Targeting Ethereum Wallet Credentials
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
@dcos/recordio
Advanced tools
Provides a function to read records in the RecordIO format from the input string
👩🔬 Please be aware that this package is still experimental — changes to the interface and underlying implementation are likely, and future development or maintenance is not guaranteed.
This package provides a function to read records in the RecordIO format from the input string.
import { read } from "@dcos/recordio";
const [records, rest] = read(input);
Function read
returns a tuple whose first element is an array of records and the second element is the rest part of the input that is either empty or contains partial records.
Prepends to a single record its length in bytes, followed by a newline and then the data:
The BNF grammar for a RecordIO-encoded streaming response is:
records = *record
record = record-size LF record-data
record-size = 1*DIGIT
record-data = record-size(OCTET)
record-size
should be interpreted as an unsigned 64-bit integer (uint64).
For example, a stream may look like:
121\n
{"type": "SUBSCRIBED","subscribed": {"framework_id": {"value":"12220-3440-12532-2345"},"heartbeat_interval_seconds":15.0}20\n
{"type":"HEARTBEAT"}675\n
...
Further documentation can be found in the Apache Mesos documentation.
The implementation is tested with different UTF-8 character sets to verify that it reads the correct number of bytes from the input string.
You can use the following python snippet to create test records from the provided messages array.
messages = [u"foo", u"bar"]
for message in messages:
chars = len(message)
size = len(message.encode("utf-8"))
print("Message")
print("> Chars: %s" % chars)
print("> Size: %s" % size)
print("> Message: %s" % message)
print("> Record: %s\\n%s" % (size, message))
Some of the tests use character sets from the UTF-8 decoder capability and stress test developed by Markus Kuhn to ensure that parsing of character with different byte sequences works properly.
FAQs
Provides a function to read records in the RecordIO format from the input string
The npm package @dcos/recordio receives a total of 62 weekly downloads. As such, @dcos/recordio popularity was classified as not popular.
We found that @dcos/recordio demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 9 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
Security News
Ruby maintainers from Bundler and rbenv teams are building rv to bring Python uv's speed and unified tooling approach to Ruby development.
Security News
Following last week’s supply chain attack, Nx published findings on the GitHub Actions exploit and moved npm publishing to Trusted Publishers.