
Research
NPM targeted by malware campaign mimicking familiar library names
Socket uncovered npm malware campaign mimicking popular Node.js libraries and packages from other ecosystems; packages steal data and execute remote code.
aes-key-wrapping-2019-context
Advanced tools
A JSON-LD context for the AesKeyWrappingKey2019 crypto suite for JavaScript.
A JSON-LD context for the AesKeyWrappingKey2019 crypto suite for JavaScript.
See also (related specs):
Requires Node.js 12+
To install via NPM:
npm install aes-key-wrapping-2019-context
import aesCtx from 'aes-key-wrapping-2019-context';
// or
const aesCtx = require('aes-key-wrapping-2019-context');
const {contexts, constants, appContextMap} = aesCtx;
aesCtx.CONTEXT_URL
// 'https://w3id.org/security/suites/aes-2019/v1'
// Codec term map value for CBOR-LD
aesCtx.constants.CBORLD_CODEC_VALUE
// 0x1C
// get context data for a specific context
aesCtx.CONTEXT
// full context object
This package can be used with bundlers, such as webpack, in browser applications.
The library exports the following properties:
CONTEXT_URL
CONTEXT
constants
: A Object that maps constants to well-known context URLs. The
main constant CONTEXT_URL
may be updated from time to time to the
latest context location.contexts
: A Map
that maps URLs to full context data.appContextMap
: For use with cborld
library.WARNING: The .jsonld
in contexts/
is auto-generated by the npm run build
script,
each time you run the test suite.
DO NOT edit it directly (or your changes will be quickly overwritten).
Instead, make all context changes to js/context.js
.
Commercial support for this library is available upon request from Digital Bazaar: support@digitalbazaar.com
1.0.3 - 2021-04-22
FAQs
A JSON-LD context for the AesKeyWrappingKey2019 crypto suite for JavaScript.
The npm package aes-key-wrapping-2019-context receives a total of 306 weekly downloads. As such, aes-key-wrapping-2019-context popularity was classified as not popular.
We found that aes-key-wrapping-2019-context demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 6 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Socket uncovered npm malware campaign mimicking popular Node.js libraries and packages from other ecosystems; packages steal data and execute remote code.
Research
Socket's research uncovers three dangerous Go modules that contain obfuscated disk-wiping malware, threatening complete data loss.
Research
Socket uncovers malicious packages on PyPI using Gmail's SMTP protocol for command and control (C2) to exfiltrate data and execute commands.