
Research
Two Malicious Rust Crates Impersonate Popular Logger to Steal Wallet Keys
Socket uncovers malicious Rust crates impersonating fast_log to steal Solana and Ethereum wallet keys from source code.
ceri-files-view
Advanced tools
A simple, themed files view
npm install --save-dev ceri-files-view ceri-tooltip ceri-fab ceri-progress ceri-toaster ceri-icon
FilesView = require("ceri-files-view")
# load the theme (see below)
FilesView(require("ceri-files-view/materialize"))
filesView = document.create "ceri-files-view"
# add files to view:
# names need to be unique
filesView.files = [
{
name: "someFile1"
size: 100000
lastModified: 0
}
]
# add actions
filesView.rename = (file) -> new Promise (resolve, reject) =>
# somehow rename file server-side
resolve() # on success
reject() # on fail
filesView.upload = (file, setProgress) -> new Promise (resolve, reject) =>
# file is html5 file object
# https://developer.mozilla.org/de/docs/Web/API/File
# upload to server
setProgress(50) # to set progress bar to 50%
filesView.delete = (file) -> new Promise (resolve,reject) =>
# somehow delete file server-side
filesView.download = (file) -> # somehow trigger file download
setup ceri-materialize
setup webpack for ceri-icon. Include the following icons:
[ma-file_upload,ma-delete_forever,ma-mode_edit]
load theme file
filesView = FilesView(require("ceri-files-view/materialize"))
For example see dev/materialize.
Clone repository.
npm install
npm run dev
Browse to http://localhost:8080/.
Copyright (c) 2017 Paul Pflugradt Licensed under the MIT license.
FAQs
A simple, themed files view
We found that ceri-files-view demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
Socket uncovers malicious Rust crates impersonating fast_log to steal Solana and Ethereum wallet keys from source code.

Research
A malicious package uses a QR code as steganography in an innovative technique.

Research
/Security News
Socket identified 80 fake candidates targeting engineering roles, including suspected North Korean operators, exposing the new reality of hiring as a security function.