Research
Security News
Quasar RAT Disguised as an npm Package for Detecting Vulnerabilities in Ethereum Smart Contracts
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
combiner is both a command-line utility and a library for merging and processing files. The basic idea behind its is to take advantage of a functional, flexible middleware that composes map/reduce/filter callbacks.
From NPM: $ npm install combiner
From Source Code: $ git clone https://github.com/azer/combiner.git $ cd combiner; $ make deps $ make install
Besides of the API provided by the library, combiner includes a command line script to accomplish composite file merging aims.
Most basic usage example is running it without any parameters. Which produces a merge of all files on the executed directory.
$ echo "foo">a;
$ echo "bar">b;
$ echo "qux">c;
$ combiner
foo
bar
qux
Specific filenames and directories can be picked as well.
$ combiner a c
foo
qux
The goal of combiner is to provide a middleware that lets us to process these files easily;
$ combiner -map "function(el,callback){ callback(null, el.toUpperCase()) }"
FOO
BAR
QUX
The simple command above uppercases all combinerd contents, as you've supposed. The other options available are reduce and filter. Reduce option basicly replaces the default function joining the contens of the files;
$ combiner -reduce "function(a,b,callback){ callback(null,a+","+b) }"
FOO,BAR,QUX
It's quite similar with the map function as you've seen above. Unlike the map and reduce options, filter callbacks take filenames instead of the contents of the files.
$ combiner -filter "function(filename, cb){ cb(null,/^f|q/); }"
FOO
QUX
The reasion behind this approach lies on the basic design idea of the combiner library. Its body is made up of a chain of functions, applying listed operations below;
status: under development todo:
FAQs
This package name is not currently in use, but was formerly occupied by a popular package. To avoid malicious use, npm is hanging on to the package name, but loosely, and we'll probably give it to you if you want it.
The npm package combiner receives a total of 19 weekly downloads. As such, combiner popularity was classified as not popular.
We found that combiner demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
Security News
Research
A supply chain attack on Rspack's npm packages injected cryptomining malware, potentially impacting thousands of developers.
Research
Security News
Socket researchers discovered a malware campaign on npm delivering the Skuld infostealer via typosquatted packages, exposing sensitive data.