Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
@docutap-api/blue-button-generate
Advanced tools
Blue Button CCDA Generator
blue-button-generate is a module to generate CCDA files from JSON data. Currently it only supports blue-button JSON data model.
var fs = require('fs');
var bb = require('blue-button');
var bbg = require('blue-button-generate');
var xmlString = fs.readFileSync('test/fixtures/files/ccda_xml/CCD_1.xml', 'utf-8');
var record = bb.parseString(xmlString);
// ...
// changes to record
// ...
// get back xml as text
var updatedXmlString = bbg.generateCCD(record);
blue-button-generate uses javascript template objects for implementation. Each template in CCDA is represented with an object. As an example Reaction Observation object is shown
var reactionObservation = exports.reactionObservation = {
key: "observation",
attributes: {
"classCode": "OBS",
"moodCode": "EVN"
},
content: [
fieldLevel.templateId("2.16.840.1.113883.10.20.22.4.9"),
fieldLevel.id,
fieldLevel.nullFlavor("code"),
fieldLevel.text(leafLevel.sameReference("reaction")),
fieldLevel.statusCodeCompleted,
fieldLevel.effectiveTime, {
key: "value",
attributes: [
leafLevel.typeCD,
leafLevel.code
],
dataKey: 'reaction',
existsWhen: condition.codeOrDisplayname,
required: true
}, {
key: "entryRelationship",
attributes: {
"typeCode": "SUBJ",
"inversionInd": "true"
},
content: severityObservation,
existsWhen: condition.keyExists('severity')
}
]
};
This template is internally used with a call
js2xml.update(xmlDoc, input, context, reactionObservation);
where xmlDoc
is the parent xml document (Allergy Intolerance Observation) and input
is the immediate parent of bluebutton.js object that describes Reaction Observation. context
is internally used for indices in text references.
This approach is an alternative to direct programming or text based templates such as in bluebutton.js and is motivated by the following
nullFlavor
automatically when no data exists.The following are the properties of the templates
key
: This is the name for the xml element.attributes
: This describes the attributes of the element. attributes
can be an object of with key
and value
pairs for each attribute or it can be an array of such objects. Each attribute object or can be a function with input
argument that returns attributes.text
: This is a function with input
attribute that returns text value of the element.content
: This is an array of other templates that describe the children of the element. For a single child an object can be used.dataKey
: This is the property of input
that serves as the data for the template.required
: This identifies if template is required or not. If template is required and there is not value in the input
a nullFlavor
node is created.dataTransform
: This is a function to transform the input.existWhen
: This is a boolean function with input
argument to describe it the elements should exists or not.FAQs
Blue Button CCDA Generator.
We found that @docutap-api/blue-button-generate demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.