
Research
Malicious fezbox npm Package Steals Browser Passwords from Cookies via Innovative QR Code Steganographic Technique
A malicious package uses a QR code as steganography in an innovative technique.
JSON-Splora
Advanced tools
JSON-Splora is a GUI for editing, visualizing, and manipulating JSON data with jq or JavaScript.
The editor is a JavaScript editor, and the input is parsed as json5. This allows for comments as well as a relaxed JSON input format. Once the editor has valid JSON, an input window will appear below, allowing you to manipulate the object with JavaScript or jq. A panel will appear to the right with the output, and updates live as the input or filter changes.
output = x${filter}
jsplora [file]
This will create the application as well as the alias jsplora
.
npm i -g JSON-Splora
Building locally creates a directory JSON-Splora-<system>
which contains the application.
npm install
# build for darwin, linux, win32
npm run-script build-darwin
npm run-script build-linux
npm run-script build-win32
Contributions are welcome! Please read through and follow the style of the rest of the code. eslint
is used as a code pre-commit hook, and will catch many simple errors. Please squash your commits and leave concise commit messages.
FAQs
GUI for editing, visualizing, and manipulating JSON data
The npm package JSON-Splora receives a total of 12 weekly downloads. As such, JSON-Splora popularity was classified as not popular.
We found that JSON-Splora demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
A malicious package uses a QR code as steganography in an innovative technique.
Research
/Security News
Socket identified 80 fake candidates targeting engineering roles, including suspected North Korean operators, exposing the new reality of hiring as a security function.
Application Security
/Research
/Security News
Socket detected multiple compromised CrowdStrike npm packages, continuing the "Shai-Hulud" supply chain attack that has now impacted nearly 500 packages.