Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
[![Build Status](https://travis-ci.org/eirslett/bankie.svg?branch=master)](https://travis-ci.org/eirslett/bankie)
This tool calculates IBAN bank account numbers.
Only Norway is supported yet. (Support for other countries should be added!)
npm install bankie
This is the general flow:
Look at the unit tests (for example test/norwegian-test.js
),
they show you how the package should be used.
Feel free to add support for more countries! Follow the directions of the project; add unit tests, and the code should be formatted according to the standard style guide.
If you want to add other features than additional country support, I suggest that you open a GitHub issue first, to discuss it.
Here are some common commands:
# Build
npm run build
# Run tests
npm run mocha
# Run lint
npm run lint
Check out the master
branch, run
# could be npm version "minor" or "major" instead of "patch"
npm version patch -m "Release new version"
git push --follow-tags
Travis CI will build and release the package.
Some resources/datasets are stored in the resources/ directory. These can be processed by build scripts inside the build/ directory, for example to convert xls/csv files to JSON.
FAQs
[![Build Status](https://travis-ci.org/eirslett/bankie.svg?branch=master)](https://travis-ci.org/eirslett/bankie)
The npm package bankie receives a total of 0 weekly downloads. As such, bankie popularity was classified as not popular.
We found that bankie demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.