
Research
/Security News
Contagious Interview Campaign Escalates With 67 Malicious npm Packages and New Malware Loader
North Korean threat actors deploy 67 malicious npm packages using the newly discovered XORIndex malware loader.
@elg/speedscope
Advanced tools
Originally, Speedscope is a fast, interactive web-based viewer for performance profiles. For more information, see the upstream repository https://github.com/jlfwong/speedscope.
This fork exposes some of its internals for use in the React Concurrent Mode Profiler. There are no plans to upstream the changes in this fork; for more details, see this discussion.
yarn add @elg/speedscope
# OR
npm install @elg/speedscope
When upstream is updated, we'll want to update this fork as well. Because
this fork adds a few commits on top of Speedscope's master
branch, we'll
just need to rebase it on upstream/master
and fix anything that's broken.
master
branch.fork-for-scheduling-profiler
on it.yarn build
to run the scripts/build-release.sh
script.cd dist/library
flow init
to add a .flowconfig
file. (assumes you have
flow-bin
installed
globally)flow check
. Follow the steps below to fix any errors.This package's exports are declared in src/library.ts
. Exports added here
will be able to be imported.
Flow types are generated by Flowgen
and manually fixed up with regex. If flow check
is failing, follow these
steps to fix the errors:
scripts/build-release.sh
.The fork-for-scheduling-profiler
branch of this repository is automatically
published to NPM by GitHub
Actions.
Our generated version numbers have this format: <upstream Speedscope version>-<Git commit hash>
FAQs
Custom Speedscope fork with exported internals
The npm package @elg/speedscope receives a total of 35,161 weekly downloads. As such, @elg/speedscope popularity was classified as popular.
We found that @elg/speedscope demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
/Security News
North Korean threat actors deploy 67 malicious npm packages using the newly discovered XORIndex malware loader.
Security News
Meet Socket at Black Hat & DEF CON 2025 for 1:1s, insider security talks at Allegiant Stadium, and a private dinner with top minds in software supply chain security.
Security News
CAI is a new open source AI framework that automates penetration testing tasks like scanning and exploitation up to 3,600× faster than humans.