
Security News
Socket Releases Free Certified Patches for Critical vm2 Sandbox Escape
A critical vm2 sandbox escape can allow untrusted JavaScript to break isolation and execute commands on the host Node.js process.
a proof of concept to copy files over a multiplexed stream. not feature complete.
An example using the net module.
var net = require('net')
var cp = require('cp-mux')
function onServerReady() {
var socket = net.connect(3000)
var client = cp.createClient('./test/sink')
socket.pipe(client)
client.on('end', function() {
process.exit(0)
})
}
net
.createServer(cp.createServer('./test/source'))
.listen(3000, onServerReady)
Determines how many files that should be transferred concurrently. Default is 10.
Specifies removal of the target file if it cannot be opened for write operations. The removal precedes any copying performed by the cp command.
Makes the cp command follow symbolic links (symlinks) so that the destination has the target file rather than a symlink to the target.
A callback that provides the name of a file to be overwritten as the first parameter. This occurs if the TargetDirectory or TargetFile parameter contains a file with the same name as a file specified in the SourceFile or SourceDirectory parameter. If you call back with true, false prevents overwriting the file.
The perserve flag preserves the following characteristics of each source path in the corresponding target: The time of the last data modification and the time of the last access, the ownership (only if it has permissions to do this), and the file permission bits.
Copy directories recursively.
FAQs
copy files over a multiplexed stream
The npm package cp-mux receives a total of 4 weekly downloads. As such, cp-mux popularity was classified as not popular.
We found that cp-mux demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
A critical vm2 sandbox escape can allow untrusted JavaScript to break isolation and execute commands on the host Node.js process.

Research
Five malicious NuGet packages impersonate Chinese .NET libraries to deploy a stealer targeting browser credentials, crypto wallets, SSH keys, and local files.

Security News
pnpm 11 turns on a 1-day Minimum Release Age and blocks exotic subdeps by default, adding safeguards against fast-moving supply chain attacks.