
Research
/Security News
9 Malicious NuGet Packages Deliver Time-Delayed Destructive Payloads
Socket researchers discovered nine malicious NuGet packages that use time-delayed payloads to crash applications and corrupt industrial control systems.
cond is hosted at Github. mona is a
public domain work, dedicated using
CC0 1.0. Feel free to do
whatever you want with it.
$ npm install cond
or
$ bower install cond
Execute the following in a browser session, with developer tools open, and follow the instructions:
var availableFlavors = ["chocolate", "vanilla", "mint chocolate chip"];
function getIceCream(flavor) {
if (availableFlavors.indexOf(flavor) !== -1) {
return flavor + " ice cream ゲットー!";
} else {
// Just like throw new Error("something"), but we provide a way
// the user can recover from it.
return cond.error("Sorry, that flavor is not available", [
"different-flavor", "Try a different flavor", getIceCream
], [
"add-flavor", "Add this flavor to available ones and retry", function() {
availableFlavors.push(flavor);
return getIceCream(flavor);
}
]);
}
}
console.log(getIceCream("coffee"));
console.log("I really like this flavor!");
// In the console, do:
// > showRecoveries();
// > recover(0, "chocolate");
// You can also access recoveries programmatically:
console.log(cond.handlerBind(function() {
return getIceCream("bubblegum");
}, [Error, function(e) { return cond.recover("add-flavor"); }]));
cond is a JavaScript implementation of
Common Lisp's condition system,
a system for handling errors and other conditions of interest that handles
signals at the call site, before the stack is unwound -- allowing you to repair
or alter what happens at the callsite, and continuing executing as if nothing
had been signaled/thrown.
FAQs
Restartable error handling system
The npm package cond receives a total of 0 weekly downloads. As such, cond popularity was classified as not popular.
We found that cond demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
Socket researchers discovered nine malicious NuGet packages that use time-delayed payloads to crash applications and corrupt industrial control systems.

Security News
Socket CTO Ahmad Nassri discusses why supply chain attacks now target developer machines and what AI means for the future of enterprise security.

Security News
Learn the essential steps every developer should take to stay secure on npm and reduce exposure to supply chain attacks.