Security News
pnpm 10.0.0 Blocks Lifecycle Scripts by Default
pnpm 10 blocks lifecycle scripts by default to improve security, addressing supply chain attack risks but sparking debate over compatibility and workflow changes.
checksum-buffer
Advanced tools
A node module that uses multihash to make checksummed buffers. The checksum is at the beginning of the buffer (not at the end) because the multihash defines its own length.
> cat try.js
var CkBuffer = require('checksum-buffer')
// let's make some data
var buf = new Buffer('beep boop')
console.log('buffer: ' + buf.inspect())
// let's checksum that data
var ckbuf = new CkBuffer(buf, 'sha1')
console.log('ckbuffer: ' + ckbuf.buffer.inspect())
// check if the checksum passes
console.log('ok? ' + ckbuf.check())
// get the checksum only
console.log('checksum: ' + ckbuf.checksum().inspect())
// get the raw data back
var data = ckbuf.data()
console.log('data: ' + data.inspect())
// Oooh! let's mess with the data!
data[data.length - 1] = 0x00
console.log(ckbuf.buffer)
console.log('ok? ' + ckbuf.check())
// you can write to the data buffer
data.write('boop beep')
console.log('new data: ' + data.inspect())
// but make sure to recalculatea
console.log('ok? ' + ckbuf.check())
console.log('new cksum: ' + ckbuf.recalculate().inspect())
console.log('ok? ' + ckbuf.check())
> node try.js
buffer: <Buffer 62 65 65 70 20 62 6f 6f 70>
ckbuffer: <Buffer 11 14 7c 83 57 57 7f 51 d4 f0 a8 d3 93 aa 1a aa fb 28 86 3d 94 21 62 65 65 70 20 62 6f 6f 70>
ok? true
checksum: <Buffer 11 14 7c 83 57 57 7f 51 d4 f0 a8 d3 93 aa 1a aa fb 28 86 3d 94 21>
data: <Buffer 62 65 65 70 20 62 6f 6f 70>
<Buffer 11 14 7c 83 57 57 7f 51 d4 f0 a8 d3 93 aa 1a aa fb 28 86 3d 94 21 62 65 65 70 20 62 6f 6f 00>
ok? false
new data: <Buffer 62 6f 6f 70 20 62 65 65 70>
ok? false
new cksum: <Buffer 11 14 83 2a 65 89 c9 19 5a 72 c0 ae 07 91 47 d5 51 e8 9a 97 20 bd>
ok? true
FAQs
a buffer with a checksum + data
The npm package checksum-buffer receives a total of 24 weekly downloads. As such, checksum-buffer popularity was classified as not popular.
We found that checksum-buffer demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
pnpm 10 blocks lifecycle scripts by default to improve security, addressing supply chain attack risks but sparking debate over compatibility and workflow changes.
Product
Socket now supports uv.lock files to ensure consistent, secure dependency resolution for Python projects and enhance supply chain security.
Research
Security News
Socket researchers have discovered multiple malicious npm packages targeting Solana private keys, abusing Gmail to exfiltrate the data and drain Solana wallets.