Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
ipld(getBlock)
Must return IPLD Interface.
getBlock
is an async function that accepts a CID and returns a promise for
the binary blob of that CID.
Takes a native object that can be serialized.
Returns an iterable. All items in iterable much be instances of Block
or
promises that resolve instances of Block
.
When returning multiple blocks the last block must be the root block.
Takes a binary blob to be deserialized.
Returns a promise to a native object.
Takes a binary blob of a serialzed node.
Returns an iterable. All item sin iterable must be either strings or promises that resolve to strings.
Takes a binary blob of a serialized node and a path to child links.
Returns a promise to an object with two properties: value
and remaining
.
value
must be either a deserialized node or a CID instance.
remaining
must be a string of the remaining path.
Throws an Error() when path cannot be resolved. Error instance should have a
.code
attribute set to 404
.
Takes a binary blob of a serialize node.
Returns an iterator. All items in the iterator must be instances of CIDor promises that resolve to instances of CID.
Returns only the CID's required to deserialize this node. Must not contain CID's of named links.
FAQs
## `ipld(getBlock)`
The npm package alt-ipld receives a total of 1 weekly downloads. As such, alt-ipld popularity was classified as not popular.
We found that alt-ipld demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.