Research
Security News
Malicious npm Package Targets Solana Developers and Hijacks Funds
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
cameron-streams
Advanced tools
Like Cameron Frye in Ferris Bueller's Day Off, these streams will do whatever stupid thing you want them to. In practice, this can be helpful, especially when testing other streams.
He'll keep calling me, he'll keep calling me until I come over. He'll make me feel guilty. This is uh... This is ridiculous, ok I'll go, I'll go, I'll go, I'll go, I'll go. What - I'LL GO. Shit.
You know the drill.
npm install cameron-streams --save
A writable stream that does nothing but emit write
events when data is written. Each event has a chunk
argument. Otherwise, written data is ignored.
emitter = require('cameron-streams').emitter()
emitter.on 'write', (chunk) ->
console.log chunk.toString()
emitter.write
"""
I am not going to sit on my ass as the events that
affect me unfold to determine the course of my life.
"""
# Prints Cameron's resolution
A writable stream that handles data slowly. Set its delay in milliseconds when you create the stream.
slow = require('cameron-streams').slow(100)
start = Date.now()
slow.write "Please don't say were not going to take the car home.", ->
console.log Date.now() - start
# Prints something close to 100
A readable stream that provides random bytes. Set how much data you want the stream to produce when you create the stream.
fs = require 'fs'
random = require('cameron-streams').random(1024 * 1024)
random.pipe(fs.createWriteStream './output')
random.on 'end', ->
console.log fs.statSync('./output').size
# Prints 1,048,576 (1 mb)
You can also get a random stream of more readable output using cameron.encoded()
. By default, the random bytes are hex encoded.
FAQs
Streams to help with testing other streams.
We found that cameron-streams demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
Security News
Research
Socket researchers have discovered malicious npm packages targeting crypto developers, stealing credentials and wallet data using spyware delivered through typosquats of popular cryptographic libraries.
Security News
Socket's package search now displays weekly downloads for npm packages, helping developers quickly assess popularity and make more informed decisions.