
Security News
/Research
Wallet-Draining npm Package Impersonates Nodemailer to Hijack Crypto Transactions
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
@leaningtech/cheerpx
Advanced tools
CheerpX enables running X86 binary applications and libraries in the browser within a secure WebAssembly sandbox.
CheerpX is a powerful X86 virtualization library designed to run unmodified binary applications and libraries in the browser. It leverages a WebAssembly-based sandbox and standard browser APIs to ensure security, even when executing untrusted code. CheerpX supports Linux-compatible system calls and can run many common applications, including complete Linux distributions.
CheerpX features an advanced Just-In-Time compiler that dynamically translates X86 code to WebAssembly as needed. This engine is highly robust, capable of handling dynamically generated and self-modifying code.
To see CheerpX in action, visit WebVM for shell access to a complete Debian machine running in the browser.
CheerpX is proprietary software and it's free to use only for personal and open-source projects. Commercial support, feature fast tracking, sponsored development and consulting packages are available for Enterprise customers.
FAQs
Run X86 binary applications and libraries in the browser
The npm package @leaningtech/cheerpx receives a total of 59 weekly downloads. As such, @leaningtech/cheerpx popularity was classified as not popular.
We found that @leaningtech/cheerpx demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 3 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
/Research
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
Security News
This episode explores the hard problem of reachability analysis, from static analysis limits to handling dynamic languages and massive dependency trees.
Security News
/Research
Malicious Nx npm versions stole secrets and wallet info using AI CLI tools; Socket’s AI scanner detected the supply chain attack and flagged the malware.