Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
@erebos/keccak256
Advanced tools
keccak256 utilities
yarn add @erebos/keccak256
See the library documentation.
MIT
v0.9.0 (2019-08-12)
The main change in this release is the code base being rewritten in TypeScript. As part of these changes, the library no longer uses ES modules default
exports but only named exports, such as:
import { Bzz } from '@erebos/api-bzz-node'
import { Pss } from '@erebos/api-pss'
import { createHex } from '@erebos/hex'
EMPTY_HEX
constant has been renamed to EMPTY_ADDRESS
.sendRaw()
, setPeerPublicKey()
and setSymmetricKey()
methods of the Pss
class no longer set a default address
value, use EMPTY_ADDRESS
if needed.The @erebos/swarm-browser
package now exports its contents in the Erebos.swarm
namespace instead of Erebos
. For example Erebos.swarm.SwarmClient()
should be used instead of Erebos.SwarmClient()
.
The browser builds (in the dist
folder) have been renamed from erebos.development.js
and erebos.production.js
to erebos.swarm.development.js
and erebos.swarm.production.js
to better reflect this change.
downloadTarTo()
method has been added to @erebos/api-bzz-node
.@erebos/api-bzz-react-native
has been added by Mark Vujevits in PR #98.sign()
and verify()
functions exported by the @erebos/secp256k1
package now accept a BNInput
input value as exported by the elliptic
package.addChapter()
method of the Timeline
class now calls createChapter()
, so default values for the chapter will be injected.FAQs
keccak256 utilities
We found that @erebos/keccak256 demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 6 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.