
Research
npm Malware Targets Telegram Bot Developers with Persistent SSH Backdoors
Malicious npm packages posing as Telegram bot libraries install SSH backdoors and exfiltrate data from Linux developer machines.
@stdlib/object-assign
Advanced tools
Copy enumerable own properties from one or more source objects to a target object.
We believe in a future in which the web is a preferred environment for numerical computation. To help realize this future, we've built stdlib. stdlib is a standard library, with an emphasis on numerical and scientific computation, written in JavaScript (and C) for execution in browsers and in Node.js.
The library is fully decomposable, being architected in such a way that you can swap out and mix and match APIs and functionality to cater to your exact preferences and use cases.
When you use stdlib, you can be absolutely certain that you are using the most thorough, rigorous, well-written, studied, documented, tested, measured, and high-quality code out there.
To join us in bringing numerical computing to the web, get started by checking us out on GitHub, and please consider financially supporting stdlib. We greatly appreciate your continued support!
Copy enumerable own properties from one or more source objects to a target object.
npm install @stdlib/object-assign
var assign = require( '@stdlib/object-assign' );
Copies enumerable own properties from one or more source objects to a target object.
var x = {
'a': 'beep'
};
var y = {
'b': 'boop'
};
var z = assign( x, y );
var v = z.b;
// returns 'boop'
var bool = ( z === x );
// returns true
var assign = require( '@stdlib/object-assign' );
var obj1 = {
'name': 'Jane',
'age': 29
};
var obj2 = {
'country': 'US',
'city': 'San Francisco'
};
var obj3 = {
'hobby': 'Reading'
};
var result = assign( obj1, obj2, obj3 );
// returns { 'name': 'Jane', 'age': 29, 'country': 'US', 'city': 'San Francisco', 'hobby': 'Reading' }
This package is part of stdlib, a standard library for JavaScript and Node.js, with an emphasis on numerical and scientific computing. The library provides a collection of robust, high performance libraries for mathematics, statistics, streams, utilities, and more.
For more information on the project, filing bug reports and feature requests, and guidance on how to develop stdlib, see the main project repository.
See LICENSE.
Copyright © 2016-2024. The Stdlib Authors.
0.2.2 (2024-07-28)
No changes reported for this release.
</section> <!-- /.release --> <section class="release" id="v0.2.1">FAQs
Copy enumerable own properties from one or more source objects to a target object.
The npm package @stdlib/object-assign receives a total of 7,032 weekly downloads. As such, @stdlib/object-assign popularity was classified as popular.
We found that @stdlib/object-assign demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Malicious npm packages posing as Telegram bot libraries install SSH backdoors and exfiltrate data from Linux developer machines.
Security News
pip, PDM, pip-audit, and the packaging library are already adding support for Python’s new lock file format.
Product
Socket's Go support is now generally available, bringing automatic scanning and deep code analysis to all users with Go projects.