
Research
/Security News
9 Malicious NuGet Packages Deliver Time-Delayed Destructive Payloads
Socket researchers discovered nine malicious NuGet packages that use time-delayed payloads to crash applications and corrupt industrial control systems.
coinstac-simulator
Advanced tools
COINSTAC simulator for computation runs. Documentation.
Ensure you have Node.js installed. Then, the following command from a shell:
npm install --global coinstac-simulator
coinstac-simulator contains a command line interface and a Node.js API. The simulator is designed to be run in your root computation directory, but can be run by specifying exact paths to necessary files.
coinstac-simulator has no required flags, but will assume ./compspec.json, ./test/inputspec.json, and ./test/ for computation directory use eg: input|output. The later directories will be created automatically if they do not exist. File outputs are saved to ./test/[local#|remote]/output/simulatorRun, consecutive runs will overwrite data. If you do not have an input spec for you run, a prompt will ask you for inputs based on the current compspec and give you the option to persist that input spec.
An example computation specification, compspec.json, can be found here and here for decentralized computations.
For an in depth overview on how to create computations a guide can be found here
Run coinstac-simulator --help for more information on how to use the CLI.
coinstac-simulator can output further profile timing information that may be useful to see performance bottlenecks in your computation. To access this information run simulator with the following envar exported export DEBUG=pipeline:profile* && coinstac-simulator --loglevel info
MIT. See LICENSE for details.
FAQs
COINSTAC simulator for computation runs.
We found that coinstac-simulator demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 3 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
Socket researchers discovered nine malicious NuGet packages that use time-delayed payloads to crash applications and corrupt industrial control systems.

Security News
Socket CTO Ahmad Nassri discusses why supply chain attacks now target developer machines and what AI means for the future of enterprise security.

Security News
Learn the essential steps every developer should take to stay secure on npm and reduce exposure to supply chain attacks.