Research
Security News
Quasar RAT Disguised as an npm Package for Detecting Vulnerabilities in Ethereum Smart Contracts
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
are-you-around
Advanced tools
Let your friends know if you are around! Publish your status so friends can subscribe. All status updates are sent directly to your friends via peer to peer networks.
Let your friends know if you are around! Publish your status so friends can subscribe. All status updates are sent directly to your friends via peer to peer networks.
The app post updates and subscribes to friends via a peer-status-feed. So you can join the party outside of just the app!
Want a to see if your app is working but your friends aren't around? Meet Peer Robot! The friend that is always around. Install with npm install -g peer-robot
and run peer-robot
for an insta-friend. It will give you a key you can add as a friend.
Development Status: Very unstable.
npm install
npm start
If you receive a version mismatch error in the console, try npm run rebuild
.
Built with these awesome tools:
Run npm run start:dev
to run in development mode and watch file changes.
Status updates are saved in a local level database, ~/.peer-status.db
. If you delete the database your account name & key will be reset.
MIT
FAQs
Let your friends know if you are around! Publish your status so friends can subscribe. All status updates are sent directly to your friends via peer to peer networks.
We found that are-you-around demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
Security News
Research
A supply chain attack on Rspack's npm packages injected cryptomining malware, potentially impacting thousands of developers.
Research
Security News
Socket researchers discovered a malware campaign on npm delivering the Skuld infostealer via typosquatted packages, exposing sensitive data.