
Security News
OpenClaw Skill Marketplace Emerges as Active Malware Vector
Security researchers report widespread abuse of OpenClaw skills to deliver info-stealing malware, exposing a new supply chain risk as agent ecosystems scale.
async-state
Advanced tools
Parse state across async callbacks.
npm install async-state
var asyncState = require('async-state')()
asyncState.foo = 'foo'
setTimeout(function () {
console.log(asyncState.foo) // => foo
}, 2000)
asyncState.foo = 'bar'
This also works between files. For a more complex example, see the example folder.
Only object references are copied across async bounderies. The content of the object is shared! I.e. the following will get you into trouble:
var asyncState = require('async-state')()
asyncState.obj = { foo: 'foo' }
setTimeout(function () {
console.log(asyncState.obj.foo) // => bar
}, 2000)
// THIS IS BAD!
asyncState.obj.foo = 'bar'
To solve that issue, implement your own cloning logic:
var asyncState = require('async-state')()
asyncState.obj = { foo: 'foo' }
setTimeout(function () {
console.log(asyncState.obj.foo) // => foo
}, 2000)
// THIS IS GOOD :)
asyncState.obj = { foo: 'bar' }
Thanks to Andreas Madsen for pointing me towards the async_wrap API.
MIT
FAQs
Parse state across async callbacks
The npm package async-state receives a total of 16 weekly downloads. As such, async-state popularity was classified as not popular.
We found that async-state demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Security researchers report widespread abuse of OpenClaw skills to deliver info-stealing malware, exposing a new supply chain risk as agent ecosystems scale.

Security News
Claude Opus 4.6 has uncovered more than 500 open source vulnerabilities, raising new considerations for disclosure, triage, and patching at scale.

Research
/Security News
Malicious dYdX client packages were published to npm and PyPI after a maintainer compromise, enabling wallet credential theft and remote code execution.