
Research
/Security News
Weaponizing Discord for Command and Control Across npm, PyPI, and RubyGems.org
Socket researchers uncover how threat actors weaponize Discord across the npm, PyPI, and RubyGems ecosystems to exfiltrate sensitive data.
@synonymdev/selfie-records
Advanced tools
SDK for interacting with the Selfie-Records DNS TXT records.
Selfie Records SDK is designed to interact with DNS TXT records, extending the concept of Bitcoin Improvement Proposal (BIP) 353 to support a broader spectrum of data types using standard DNS infrastructure.
Selfie Records utilizes DNS TXT records for storing and retrieving arbitrary data, enhancing security and privacy through DNSSEC.
Install the SDK package using npm to get started with Selfie Records.
npm i @synonymdev/selfie-records
Utilize the SDK to interact with DNS TXT records for various applications.
import { getRecords } from "@synonymdev/selfie-records";
async function fetchRecords() {
const records = await getRecords({
name: "hello@miguelmedeiros.dev",
filters: ["bitcoin-payment", "nostr"], // optional
dnsServer: "1.1.1.1", // optional
});
console.log(records);
}
fetchRecords();
Contributions are encouraged! Submit pull requests or file issues for enhancements. GitHub Repo.
Special thanks to the creators and contributors of BIP 353, whose work inspired and laid the groundwork for Selfie Records.
Selfie Records is open-sourced under the MIT License.
FAQs
SDK for interacting with the Selfie-Records DNS TXT records.
We found that @synonymdev/selfie-records demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 12 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
/Security News
Socket researchers uncover how threat actors weaponize Discord across the npm, PyPI, and RubyGems ecosystems to exfiltrate sensitive data.
Security News
Socket now integrates with Bun 1.3’s Security Scanner API to block risky packages at install time and enforce your organization’s policies in local dev and CI.
Research
The Socket Threat Research Team is tracking weekly intrusions into the npm registry that follow a repeatable adversarial playbook used by North Korean state-sponsored actors.