Research
Security News
Quasar RAT Disguised as an npm Package for Detecting Vulnerabilities in Ethereum Smart Contracts
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
@withdouble/lucipher
Advanced tools
npm i @withdouble/lucipher
From https://cloud.google.com/iot/docs/how-tos/credentials/keys#generating_an_elliptic_curve_keys
openssl ecparam -genkey -name prime256v1 -noout -out ec_private.pem
openssl ec -in ec_private.pem -pubout -out ec_public.pem
ec_private.pem
and ex_public.pem
contain your keys in text format.
From https://cloud.google.com/iot/docs/how-tos/credentials/keys#generating_an_rsa_key
openssl genpkey -algorithm RSA -out rsa_private.pem -pkeyopt rsa_keygen_bits:2048
openssl rsa -in rsa_private.pem -pubout -out rsa_public.pem
rsa_private.pem
and rsa_public.pem
contain your keys in text format.
FAQs
Encryption and JWT toolbox
The npm package @withdouble/lucipher receives a total of 10 weekly downloads. As such, @withdouble/lucipher popularity was classified as not popular.
We found that @withdouble/lucipher demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 5 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
Security News
Research
A supply chain attack on Rspack's npm packages injected cryptomining malware, potentially impacting thousands of developers.
Research
Security News
Socket researchers discovered a malware campaign on npm delivering the Skuld infostealer via typosquatted packages, exposing sensitive data.