
Research
Two Malicious Rust Crates Impersonate Popular Logger to Steal Wallet Keys
Socket uncovers malicious Rust crates impersonating fast_log to steal Solana and Ethereum wallet keys from source code.
Spawn child processes with prefixed buffered output.
"inherit"
(default) pipe through the child process's stdout and stderr to the host process."buffered"
buffers of stdout and stderr in a common buffer to preserve ordering between the two and the buffer is flushable upon failure.Promise
allowing the child process to be awaited.npm install --save bufout
import { spawn, SpawnFailure } from "bufout";
await spawn(
// Provide the command
"some-command",
// Arguments for the command is passed through an array
["--fail"],
// Additional options
{
// Adds a prefix to any line printed to stdout or stderr
outputPrefix: "[child] ",
// Buffers the stdout and stderr of the process
// Alternatively, "inherit" can be passed to bypass buffering and write directly to stdout and stderr
// while still applying any prefix.
outputMode: "buffered",
// Optionally pass the stdout and stderr streams used when flushing the buffer
// stdout: process.stdout,
// stderr: process.stderr,
// Forwards extra options to the underlying call to node:child_process's spawn
// shell: true,
// timeout: 1000,
},
).catch((error) => {
// A special error is thrown upon failures
if (error instanceof SpawnFailure) {
// Yields: Running 'some-command' failed (code = 1)
console.error(error.message);
// Flush the buffered output, preserving order across the streams,
// to correctly interleave information with errors as they were emitted by the child process.
// Takes an optional argument of the stream to flush (default is "both" stdout and stderr).
error.flushOutput("stderr");
} else {
throw error;
}
});
// To manually kill the child process, call `kill` on the object returned from `spawn`:
const sleeper = spawn("sleep", ["10"]);
// If you get impatient
sleeper.kill();
FAQs
Buffed output of child processes, with spinners and prefixed lines
The npm package bufout receives a total of 362 weekly downloads. As such, bufout popularity was classified as not popular.
We found that bufout demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Socket uncovers malicious Rust crates impersonating fast_log to steal Solana and Ethereum wallet keys from source code.
Research
A malicious package uses a QR code as steganography in an innovative technique.
Research
/Security News
Socket identified 80 fake candidates targeting engineering roles, including suspected North Korean operators, exposing the new reality of hiring as a security function.