
Research
Malicious NuGet Packages Typosquat Nethereum to Exfiltrate Wallet Keys
The Socket Threat Research Team uncovered malicious NuGet packages typosquatting the popular Nethereum project to steal wallet keys.
@foxglove/omgidl-serialization
Advanced tools
OMG IDL message serialization, for reading and writing CDR and XCDR2 messages based on
.idl
schema
Message reader deserializes CDR, XCDR1 and XCDR2 messages into plain objects. The messages are fully deserialized.
import { parseIDL } from "@foxglove/omgidl-parser";
import { MessageReader } from "@foxglove/omgidl-serialization";
const msgDef = `
module geometry_msgs {
struct PointStamped {
Header header;
Point point;
};
};
struct Header {
uint32 seq;
Time stamp;
string frame_id;
};
struct Time {
uint32 sec;
uint64 nsec;
};
struct Point {
float x;
float y;
float z;
};
`;
const messageDefinition = parseIDL(msgDef);
const reader = new MessageReader("geometry_msgs::PointStamped", messageDefinition);
// deserialize a buffer into an object
const message = reader.readMessage([0x00, 0x01, ...]);
// access message fields
message.header.stamp;
Convert an object, array, or primitive value into binary data using CDR message serialization. (XCDR1 and XCDR2 writing is not yet supported.)
import { MessageWriter } from "@foxglove/omgidl-serialization";
const msgDef = `
module geometry_msgs {
struct PointStamped {
Header header;
Point point;
};
};
struct Header {
uint32 seq;
Time stamp;
string frame_id;
};
struct Time {
uint32 sec;
uint64 nsec;
};
struct Point {
float x;
float y;
float z;
};
`;
const messageDefinition = parseIDL(msgDef);
const writer = new MessageWriter("geometry_msgs::PointStamped", messageDefinition, cdrOptions);
// serialize the passed in object to a Uint8Array as a PointStamped message
const uint8Array = writer.writeMessage({
header: {
stamp: { sec: 0, nsec: 0 },
frame_id: ""
},
x: 1,
y: 0,
z: 0
});
MessageReader
does not support:
parseIDL
will error if this is detected in the schema to prevent incorrect deserialization.MessageWriter
does not support:
PL_CDR
) or XCDR2 (PL_CDR2
, DELIMITED_CDR2
) encoded messages utilizing extensible types. However we can deserialize these encapsulation kinds in MessageReader
.Both do not support:
wchar
and wstring
- These are written and read using custom implementations that are specific to someone's environment. If encountered during deserialization, they will throw an error saying that they are unsupported.Also see the current IDL parser schema limitations here
FAQs
OMG IDL Schema message serializers and deserializer
The npm package @foxglove/omgidl-serialization receives a total of 1,540 weekly downloads. As such, @foxglove/omgidl-serialization popularity was classified as popular.
We found that @foxglove/omgidl-serialization demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
The Socket Threat Research Team uncovered malicious NuGet packages typosquatting the popular Nethereum project to steal wallet keys.
Product
A single platform for static analysis, secrets detection, container scanning, and CVE checks—built on trusted open source tools, ready to run out of the box.
Product
Socket is launching experimental protection for the Hugging Face ecosystem, scanning for malware and malicious payload injections inside model files to prevent silent AI supply chain attacks.