
Security News
/Research
Wallet-Draining npm Package Impersonates Nodemailer to Hijack Crypto Transactions
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
@endeo/decoder
Advanced tools
A Transform for decoding endeo bytes.
Used by endeo as its decoder()
implementation.
See packages:
# endeo-std requires this and all other standard packages.
# used with endeo or with custom bytes/unstring/specials:
npm install --save @endeo/decoder
# used standalone with standard implementations:
npm install --save @endeo/decoder @endeo/bytes @endeo/specials unstring
Primarily used as the standard endeo.decoder()
implementation.
Usable directly and accepts options to configure its bytes
, unstring
, and @endeo/specials
.
// get builder:
var buildDecoder = require('@endeo/decoder')
// build default one which expects these packages are available:
// @endeo/bytes
// unstring
// @endeo/specials
decoder = buildDecoder()
// pipe encoded byte into it:
sourceStream.pipe(decoder)
// Or, write bytes to it:
decoder.write(someBuffer)
// get result via 'data' event:
decoder.on('data', function(data) {
// data is object/array/String
})
// Or, send object-mode output to another stream:
decoder.pipe(targetStream)
// customize options method #1, as direct objects:
decoder = buildDecoder({
// for the 'context' used in the 'stating' nodes
context: {
bytes: /* custom bytes object */,
unstring: /* custom unstring object */,
specials: /* custom specials object */
}
})
// customize options method #2, as properties:
decoder = buildDecoder({
// for the 'context' used in the 'stating' nodes
context: {
// the context is built with prototype and properties
// so you can customize the properties...
props: {
bytes: {
value: /* custom bytes property */
},
unstring: {
value: /* custom unstring property */
}
specials: {
value: /* custom specials property */
}
}
}
})
// the 'stating' package instance is set on the transform.
// in case you want to mess with it...
decoder.states
FAQs
A Transform for decoding endeo bytes.
The npm package @endeo/decoder receives a total of 0 weekly downloads. As such, @endeo/decoder popularity was classified as not popular.
We found that @endeo/decoder demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
/Research
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
Security News
This episode explores the hard problem of reachability analysis, from static analysis limits to handling dynamic languages and massive dependency trees.
Security News
/Research
Malicious Nx npm versions stole secrets and wallet info using AI CLI tools; Socket’s AI scanner detected the supply chain attack and flagged the malware.