
Research
/Security News
Intercom’s npm Package Compromised in Ongoing Mini Shai-Hulud Worm Attack
Compromised intercom-client@7.0.4 npm package is tied to the ongoing Mini Shai-Hulud worm attack targeting developer and CI/CD secrets.
@ipld/codec-interface
Advanced tools
npm install @ipld/codec-interface
This is the primary interface for implementing new codecs.
The interface is quite simple:
{
encode: Function,
decode: Function,
codec: String,
reader: Function
}
These are the primary methods you need to implement in order to implement a new codec.
While you can implement the entire Reader interface yourself, you can actually leverage
our codec-interface.create utility to get a full implementation with these methods alone.
encode takes a native JavaScript object and returns a binary encoding.decode takes a binary encoding and returns a nativfe JavaScript object.Methods can be either synchronous or asynchronous (returns a promise).
The reader function accepts a Block instance and returns a full Reader interface.
This method can be either synchronous or asynchronous (returns a promise).
codec-interface.create(encode, decode, codecName)Returns a full Codec Interface based on your encode and decode implementations.
Returns a generator of all the links in the block.
FAQs
Codec interface for IPLD.
The npm package @ipld/codec-interface receives a total of 145 weekly downloads. As such, @ipld/codec-interface popularity was classified as not popular.
We found that @ipld/codec-interface demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 3 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
Compromised intercom-client@7.0.4 npm package is tied to the ongoing Mini Shai-Hulud worm attack targeting developer and CI/CD secrets.

Research
Socket detected a malicious supply chain attack on PyPI package lightning versions 2.6.2 and 2.6.3, which execute credential-stealing malware on import.

Research
A brand-squatted TanStack npm package used postinstall scripts to steal .env files and exfiltrate developer secrets to an attacker-controlled endpoint.