Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
@vyacheslav97/ct
Advanced tools
Common tools (hereinafter referred to as **ct**) - a common JavaScript data structures and associated processing procedures package ([package repository](https://github.com/VyacheslavMishin/ct/tree/master)).
Common tools (hereinafter referred to as ct) - a common JavaScript data structures and associated processing procedures package (package repository).
Tip: questions bother your head? Feel free to contact me
Current version renewals:
Next scheduled updates:
To get along with this module (e.g. enable IntelliSense), enable in consumer project tsconfig.json resolvePackageJsonImports, resolvePackageJsonExports options, also check module and moduleResolution are Node16.
UIC module provides a user with two functions: transformToIterable and its wrapper, createIterableTransformer. UIC module is represented by uic.ts file of original project.
transformToIterable is a core procedure - it defines the way an input iterable is converted to an output one. createIterableTransformer wraps transformToIterable to create an iterable convertor with encapsulated target iterable constructor.
transformToIterable algorithm essentials:
UIC members can be imported as follows:
import {createIterableTransformer, transformToIterable} from '@vyacheslav97/ct/uic';
createIterableTransformer is highly recommended for usage instead of transformToIterable to avoid redundant target iterable constructor referencing. For example, lets inspect a createIterableTransformer application from uicsds.ts:
/**
* Creates <u>**Array**</u> to <u>**Map**</u> converter
* @param arrayItemTransformer <u>**Array**</u> item transformer, derives key-value pair from array item
*/
export function createArrayToMap<ArrayItemType, K, V>(
arrayItemTransformer: SingleToPair<ArrayItemType, K, V>,
) {
return createIterableTransformer<ArrayItemType[], [K, V], Map<K, V>>(Map, arrayItemTransformer);
}
createArrayToMap creates an Array to Map transformer. All such transformer needs to be utilized is an array item transform function, which converts an array item to key-value pair for Map constructor. Here goes an createArrayToMap application example:
// Clarifies the rule how to transform array item to a key-value pair list
const shiftedArrayItemToMapItemTransformer: SingleToPair<number, number, number>
= (number): [number, number] => [number, number + 1];
// Creates array to map converter with certain array item rule transformation
const arrayToMapShifted = createArrayToMap<number, number, number>(shiftedArrayItemToMapItemTransformer);
arrayToMapShifted([1, 2, 3]) //--> {1 -> 2, 2 -> 3, 3 -> 4} - final Map object content
Remember, you are able to create your own custom iterable transformers!
UICSDS module consists of createIterableTransformer applications to built-in JavaScript iterable datastructures. uicsds.ts represents UICSDS module content.
UICSDS module members can be imported as follows:
import {createArrayToMap, createMapToSet} from '@vyacheslav97/ct/uicsds';
It's pretty easy to use:
Example:
// All needed type aliases for conversion laws can be imported as follows:
import {
SingleToPair,
SingleToSingle,
PairToSingle
} from "@vyacheslav97/uic/interfaces";
// Map item to a character transformer
const keyValuePairConcatenatedTransformer: PairToSingle<number, number, string>
= (pair) => pair.join('');
// Create transformer itself
const keyValuePairConcatenated = createMapToString(keyValuePairConcatenatedTransformer);
keyValuepairConcatenated(new Map([[1, 1], [2, 2]])); // results in '1122'
Graph abstract class implements oriented graph abstraction with basic graph content manipulations: adding nodes, deleting nodes.
Graph node is represented via following generic interface:
interface GraphNodeInterface<NodeData = void> {
nodeId: string, // unic graph node identifier
// set of other graph nodes ids, from which boundaries are received
incomingBoundaries: Map<string, string>,
// set of other graph nodes which receive boundaries from a given node
outgoingBoundaries: Map<string, string>,
// Extra node data, may be ommited
nodeData?: NodeData,
}
Graph class itself implements next interface:
interface GraphInterface<NodeData = void> {
// base data structure containing all graph nodes
nodes: Map<string, GraphNodeInterface<NodeData>>,
getNode: (nodeId: string) => GraphNodeInterface<NodeData> | undefined,
getNodeData: (nodeId: string) => NodeData | undefined,
hasNode: (nodeId: string) => boolean,
addNode: (node: GraphNodeInterface<NodeData>) => void,
removeNode: (nodeId: string) => GraphNodeInterface<NodeData> | undefined,
flatten: (startNodeId: string) => Iterable<GraphNodeInterface<NodeData>>,
buildPath: (startNodeId: string, endNodeId: string) => GraphNodeInterface<NodeData>[] | undefined,
}
Some methods are not covered above:
Import Graph class:
import Graph from '@vyacheslav97/ct/graph';
// All necessary interfaces can be imported from '@vyacheslav97/ct/graphs/interfaces'
Graph can be initialized via its constructor if proper set of arguments is passed.
Graph constructor expects following arguments:
constructor(
sourceIterable?: Iterable<[string, GraphNodeInterface<NodeData>]>,
config?: GraphConfig<NodeData>,
)
Where GraphConfig:
interface GraphConfig<NodeData = void> {
levelingStepFunction?: LevelingStepFunction<NodeData>,
pathFinder?: PathBuilder<NodeData>,
}
type LevelingStepFunction<NodeData = void> = (
currentNode: GraphNodeInterface<NodeData>,
sourceGraph: GraphInterface<NodeData>,
) => GraphNodeInterface<NodeData> | null;
type PathBuilder<NodeData = void> = (
startNode: GraphNodeInterface<NodeData>,
endNode: GraphNodeInterface<NodeData>,
sourceGraph: GraphInterface<NodeData>,
) => GraphNodeInterface<NodeData>[];
USE WITH CAUTION: source iterable is passed to Map constructor as it is, with no input nodes validation (for now). You should not expect graph constructor to build edges. In future updates such validation is planned to be implemented.
If no constructor arguments are specified, empty graph instance is created.
Soon graph instance was created, nodes can be added to it via addMethod:
/**
* Adds node to graph. Throws error if node of the same id already exists
* @param nodeToAdd node to add, GraphNodeInterface<**NodeData**>
*/
addNode(nodeToAdd: GraphNodeInterface<NodeData>)
addNode adds a node to graph instance and all specified within that node edges.
Any node of graph instance can be retrieved using getNode method:
/**
* Returns graph node of specified id, if graph has node with such id
* @param nodeId target node id, **string**
*/
getNode(nodeId: string)
To retrieve nodeData you can use method getNodeData, which expects target node id as an argument.
To check whether graph possesses a node, use hasNode method (expects node id as an argument).
To remove some specific node, use removeNode method:
/**
* Removes node of given id. Does nothing if wrong id is provided
* @param nodeId id of node to remove, **string**
*/
removeNode(nodeId: string)
If graph is needed to be flattened, use flatten method. It returns an iterable, which can be used to convert a graph instance into array.
To find path between two specific nodes of given graph, use buildPath method.
flatten and builtPath have own peculiarities: both can be overridden, but only flatten has default behavior - it returns nodes field values iterable if no custom flatten procedure is specified.
To override flatten procedure, use setFlattenProcedure method.
Example:
// Has to gain one node from another. If it turns impossible - returns null
const levelingStepFunction: LevelingStepFunction<unknown> = ( // function for "linked list"
currentNode: GraphNodeInterface<unknown>,
graph: GraphInterface<unknown>,
) => {
const {
outgoingBoundaries,
} = currentNode;
const firstOutgoingBoundary = [...outgoingBoundaries]?.[0]?.[0];
return graph.getNode(firstOutgoingBoundary) || null;
};
const graph = new Graph();
graph.setFlattenProcedure(levelingStepFunction);
// then call [...graph.flatten('someStartNodeId')], for example, or use for ... of, or whatever
To initialize or override buildPath method, call setPathFinderProcedure method.
Example:
// Simple pathfinder for "linked list"
const pathFinder: PathBuilder<unknown> = (
startNode: GraphNodeInterface<unknown>,
endNode: GraphNodeInterface<unknown>,
graph: GraphInterface<unknown>,
) => {
let currentNode: GraphNodeInterface<unknown> = startNode;
const result: GraphNodeInterface<unknown>[] = [];
do {
result.push(currentNode);
currentNode = graph.getNode([...currentNode.outgoingBoundaries]?.[0]?.[0])!;
} while(result[result.length - 1]?.nodeId !== endNode.nodeId)
return result;
};
const graph = new Graph();
graph.setPathFinderProcedure(pathFinder);
// here you go, call graph.buildPath('startNodeId', 'endNodeId');
// BUT REMEMBER: invalid node ids (e.g. absent one) will trigger an error
buildPath call with no initialization triggers an error.
Import Tree class:
import Tree from '@vyacheslav97/ct/tree';
Tree abstract class extends Graph abstract class. This extension brings in following mutations:
addNode:
/**
* Adds node to a tree instance, avoiding loops generation
* @param nodeToAdd node data to add
*
* Throws error, if:
* - Has more than one incoming or outgoing boundary
* - First added node has **parentNodeId**
* - Node of the same **nodeId** already exists on a tree instance
* - Node has **parentNodeId** out of its **incomingBoundaries** or **outgoingBoundaries**
*/
addNode(nodeToAdd: GraphNodeInterface<NodeData>)
removeNode:
/**
* Removes a node from a tree instance (and the node whole subtree by default)
* Doesn't remove a node if it doesn't exist on the tree instance
* @param nodeId id of node to remove
* @param deleteSubTree if true (by default) node and its subtree are removed
*/
removeNode(nodeId: string, deleteSubTree = true)
rootNodeId added - it contains tree root node id
nodeData field becomes mandatory (but remains extensible): it has to contain parentNodeId field for each tree node except root one
Constructor signature changes slightly:
constructor(
rootNodeId: string = '',
sourceIterable?: Iterable<[string, GraphNodeInterface<NodeData>]>,
config?: GraphConfig<NodeData>,
)
FAQs
Common tools (hereinafter referred to as **ct**) - a common JavaScript data structures and associated processing procedures package ([package repository](https://github.com/VyacheslavMishin/ct/tree/master)).
The npm package @vyacheslav97/ct receives a total of 2 weekly downloads. As such, @vyacheslav97/ct popularity was classified as not popular.
We found that @vyacheslav97/ct demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.