
Security News
/Research
Wallet-Draining npm Package Impersonates Nodemailer to Hijack Crypto Transactions
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
An all in one Utility Belt solution for TypeScript and JavaScript projects. Whether you need string manipulation, quick math calculation or currency conversion this library will hopefully offer a quick solution to any problems you may face in your day to day projects whether it be a Node.js app or Angular Front End Project.
npm i @prav/belt
If you are intending to use this in your server side projects (in this example on written in TypScript) you can simply do the following
import {Text, Currency, DateTime, Numeric} from "@prav/belt";
export class MyClass implements MyInterface {
constructor() {
}
public myFunction():string{
return Text.generateRandomAplhaNumericString(16); //returns a string
}
}
Alternatively, you can use this library along side front end frameworks that also may use TypeScript, i.e. Vue, React or Angular and even their Ionic renditions (however, you may run into a run time warning in Ionic). Either way you can either import the modules as is or prototype based on the Framework you're using.
Here is a Vue.JS example of a typing:
utility.d.ts
import { Currency, DateTime, Numeric, Text } from "@prav/belt"
declare module 'vue/types/vue' {
interface Vue {
$currency: typeof Currency;
$dateTime: typeof Common;
$numeric: typeof Common;
$text: typeof Common;
}
}
Pull requests are welcome. For major changes, please open an issue first to discuss what you would like to change.
Please make sure to update tests as appropriate.
Please note that this project is in its early phase and is subject to several updates
FAQs
a general utiltiy belt library
The npm package @prav/belt receives a total of 0 weekly downloads. As such, @prav/belt popularity was classified as not popular.
We found that @prav/belt demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
/Research
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
Security News
This episode explores the hard problem of reachability analysis, from static analysis limits to handling dynamic languages and massive dependency trees.
Security News
/Research
Malicious Nx npm versions stole secrets and wallet info using AI CLI tools; Socket’s AI scanner detected the supply chain attack and flagged the malware.