Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
@quenty/brio
Advanced tools
Brios wrap a value and provide the following constraints
npm install @quenty/brio --save
Brios encapsulate the "lifetime" of a valid resource. Unlike a maid, they
Calling :Destroy() or :Kill() after death does nothing. Brios cannot be resurrected.
Useful for downstream events where you want to emit a resource. Typically brios should be killed when their source is killed.
Brios are intended to be merged with downstream brios so create a chain of reliable resources.
Anything may "kill" a brio by calling :Destroy() or :Kill().
Brios are designed to solve this issue where we emit an object with a lifetime associated with it from an Observable stream. This resource is only valid for some amount of time (for example, while the object is in the Roblox data model).
In order to know how long we can keep this object/use it, we wrap the object with a Brio, which denotes the lifetime of the object.
Modeling this with pure observables is very tricky because the subscriber will have to also monitor/emit a similar object with less clear conventions. For example an observable that emits the object, and then nil on death.
Brio.isBrio(value)
Brio.new(...) -- Wrap
Brio:GetDiedSignal()
Brio:IsDead()
Brio:ErrorIfDead()
Brio:ToMaid()
Brio:GetValue()
Brio:Destroy()
FAQs
Brios wrap an object and either are alive or dead
The npm package @quenty/brio receives a total of 154 weekly downloads. As such, @quenty/brio popularity was classified as not popular.
We found that @quenty/brio demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.