
Research
Security News
Lazarus Strikes npm Again with New Wave of Malicious Packages
The Socket Research Team has discovered six new malicious npm packages linked to North Korea’s Lazarus Group, designed to steal credentials and deploy backdoors.
codecombat-adobe-animate-parser
Advanced tools
Main Goal:
Subtasks:
[x] Monkey patch createjs apis (see them execute)
[x] How are shapes referenced in raw data
[x] Animations are referenced and can be nested.
[x] We can expose lib
from an
mutation (composition).
Preformatting steps for animate JS file:
createjs
with cjs
AdobeAn
references with an
There is only ever 1 animation.
It is the name of the file and it's attached to lib
as a MovieClip
.
To get the lib.<filename>
, return it from the an.compositions
. The id corresponds to the lib.properties.id
.
an
file.parse
method that is wired to the tests.The relationships of Movieclips, Tweens, Containers, Shapes.
A Movieclip (animation) is comprised of: Any number of movieclips, containers or shapes being tweened. Has a bounding box and frame bounds.
From a coding perspective. We start with a root movieclip. It contains tweens of shapes/movieclips, and instantiates them.
Then you can recursively walk these shapes/movieclips.
A container
A shape
A tween:
Raw shapes don't work correctly in our engine. They work when you import. But they stop working via an Action referencing an Animation.
Thoughts going forward:
Is wrapping a shape in a container an easy fix?
[YES] Is our game engine fundamentally broken for frame by frame animation.
[NO] What if the shape in the animate file is grouped before being tweened?
NEXT STEPS:
FAQs
Parses CreateJS based Adobe Animate Files
The npm package codecombat-adobe-animate-parser receives a total of 0 weekly downloads. As such, codecombat-adobe-animate-parser popularity was classified as not popular.
We found that codecombat-adobe-animate-parser demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
The Socket Research Team has discovered six new malicious npm packages linked to North Korea’s Lazarus Group, designed to steal credentials and deploy backdoors.
Security News
Socket CEO Feross Aboukhadijeh discusses the open web, open source security, and how Socket tackles software supply chain attacks on The Pair Program podcast.
Security News
Opengrep continues building momentum with the alpha release of its Playground tool, demonstrating the project's rapid evolution just two months after its initial launch.