
Research
Security News
Lazarus Strikes npm Again with New Wave of Malicious Packages
The Socket Research Team has discovered six new malicious npm packages linked to North Korea’s Lazarus Group, designed to steal credentials and deploy backdoors.
bedrock-provider
Advanced tools
Minecraft Bedrock level provider for loading and storing worlds on disk
npm i bedrock-provider
Writing example:
const fs = require('fs')
const { LevelDB } = require('leveldb-zlib')
const { WorldProvider } = require('bedrock-provider')
const registry = require('prismarine-registry')('bedrock_1.17.10')
const Block = require('prismarine-block')(registry)
const ChunkColumn = require('prismarine-chunk')(registry)
async function main() {
const x = 0, z = 0
const cc = new ChunkColumn({ x, z })
cc.setBlock({ x: 0, y: 1, z: 0 }, Block.fromStateId(registry.blocksByName.dirt.defaultState))
// Create a new database and store this chunk in there
const db = new LevelDB('./sample', { createIfMissing: true }) // Create a DB class
await db.open() // Open the database
const world = new WorldProvider(db, { dimension: 0 })
world.save(x, z, cc) // Store this chunk in world
await db.close() // Close it
// Done! 😃
}
See tests/ for more usage examples.
The exported WorldProvider
class allows you to load a save file from a LevelDB database. The
first parameter is the db (leveldb-zlib instance), and the
second is an options object. The options argument takes a dimension ID (overworld or nether or end are 1, 2 and 3).
The options argument also takes a version, which if not specified will default to the latest version. When you access APIs like getBlock or setBlock, this is the version which will be assumed.
This returns a ChunkColumn at the specified x
and z
coordinates. full
if we should load biomes,
entities, tiles, and other related data ontop of chunks.
Saves a ChunkColumn into the database.
3.0.0
FAQs
Minecraft Bedrock edition chunk provider
We found that bedrock-provider demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
The Socket Research Team has discovered six new malicious npm packages linked to North Korea’s Lazarus Group, designed to steal credentials and deploy backdoors.
Security News
Socket CEO Feross Aboukhadijeh discusses the open web, open source security, and how Socket tackles software supply chain attacks on The Pair Program podcast.
Security News
Opengrep continues building momentum with the alpha release of its Playground tool, demonstrating the project's rapid evolution just two months after its initial launch.