Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
The Aleph's diameter was probably little more than an inch, but all space was there, actual and undiminished. Each thing (a mirror's face, let us say) was infinite things, since I distinctly saw it from every angle of the universe.
When working on client-side apps, which are either prototypes/POCs or are supposed to be thin clients, getting all the data from the server, the need for some random data to be used in code arise. There's a great lib Chance.js and there's a great service json-generator, which help greatly when in need of some random data for that matter, but you either need to know all the objects/properties you will need in advance, or you're going to use single object and call some methods on them.
aleph-box can be considered a plain chance.js wrapper based on ES6 Proxies, which gives you an opportunity to get random data by simply trying to access it in place, without need to call some methods or create new nested objects.
Install library by running
npm install sudodoki/aleph-box
Require it in your code
var Store = require('aleph-box')
var store = new Store()
Install library by running
bower install sudodoki/aleph-box
Include bower_components/aleph-box/bundled.js into your page. You now have Aleph constructor globally available.
After instantiating Aleph constructor you will get object that will have either properties from standard API, like 'name', 'surname', 'bio', 'phone' or other nested Aleph objects (unless you assign something yourself). Thus, you can do something like
var store = new Aleph();
store.people
.forEach(function(person){
console.log(person.name + ' ' + person.surname);
});
There's an example of using aleph-box together with AngularJS to display simple contact book. Be sure to run in compatible browser.
This library is impelemented using proxies, so it will run in environments, that have support for those. Generally speaking, it's Node behind --harmony
flag and FF. This library also leverages harmony-reflect for getting some normalized goodies across different environments.
There's a mapping for property name in Aleph & which method would be called on chance library
There're some sort of roadmap I would like to see implemented to consider this thing done & usable, would appreciate some feedback and/or contributions.
FAQs
No backend anything stubber aka Chance.js without all the parens
We found that aleph-box demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.