
Security News
/Research
Wallet-Draining npm Package Impersonates Nodemailer to Hijack Crypto Transactions
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
@superhuman/fast64
Advanced tools
This immodestly claims to be the fastest in-browser utf-8 safe Base64 decoding library. If you can beat it in the latest version of Chrome, please send a pull request :).
I built it as part of the Superhuman email client, as a significant portion of our CPU-burn goes into Base64 parsing.
It's based on mythic work by DRDigit (Vassilis Petroulias). (I say mythic,
because its origins are shrouded in mystery), but uses modern browser
features (namely TextEncoder
, TextDecoder
, Uint8Array
, and
ArrayBuffer
) to beat the original by a very healthy multiplier.
npm install fast64
var fast64 = require('base64');
// For standard base64
base64 = fast64.encode(string);
string = fast64.decode(base64);
// If you want to decode till Uint8Array and skip the UTF8 decoding.
// This is useful in cases where you need Uint8Array for eg. create blob out of Uint8Array result.
uint8Array = fast64.decode(base64, {uint8Array:true});
// For URL-safe base64 (-_ in place of +/, and no padding)
base64 = fast64.urlencode(string);
string = fast64.urldecode(base64);
// If you want to decode till Uint8Array and skip the UTF8 decoding.
// This is useful in cases where you need Uint8Array for eg. create blob out of Uint8Array result.
uint8Array = fast64.urldecode(base64, {uint8Array:true});
If you want to develop this package, you can run the tests in-browser:
npm install
open test/index.html
FAQs
The fastest in-browser base64 library
The npm package @superhuman/fast64 receives a total of 437 weekly downloads. As such, @superhuman/fast64 popularity was classified as not popular.
We found that @superhuman/fast64 demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 12 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
/Research
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
Security News
This episode explores the hard problem of reachability analysis, from static analysis limits to handling dynamic languages and massive dependency trees.
Security News
/Research
Malicious Nx npm versions stole secrets and wallet info using AI CLI tools; Socket’s AI scanner detected the supply chain attack and flagged the malware.