
Research
Shai-Hulud Descends to Hades: Miasma Worm Campaign Spreads with New PyPI Wave
Socket found 37 malicious PyPI wheels that abuse Python startup hooks to launch a Bun-powered credential stealer tied to Mini Shai-Hulud/Miasma.
一些个人简单的函数方法,包含防抖,节流,深拷贝等
<script src="./cq_tool.js">
cq.debounce(Fn,time)
</script>
throttle(Fn,time)
用于高频事件,如鼠标移动,页面滚动,高频点击等场景
el.addEventListen('scroll',()=>{
cq.throttle(Fn,1000)
})
debounce(Fn,time)
用于输入框请求关键字等场景
el.addEventListen('keyUp',()=>{
cq.debounce(Fn,1000)
})
deepclone(obj)
let obj={
arr:[1,2,3],
obj:{
a:1
}
}
let dClone=cq.deepclone(obj)
dClone.arr.push(4)
dCLone.obj.a=2
console.log(obj)//=>{arr:[1,2,3],obj:{a:1}}
console.log(dClone)//=>{arr:[1,2,3,4],obj:{a:2}}
deleteObjFalse(obj,types)
用于去除对象中无效值的属性,允许自定义(不支持属性值为复杂数据类型)
types默认为null,false," "
let obj={
a:false,b:null,c:'',d:0,f:123
e:{a:null}
}
console.log(cq.deleteObjFalse(obj,false,null,123))
//=>{c:'',d:0,e:{a:null}}
arrUni(arr)
用于剔除数组中重复的值
let arr=[1,2,3,1,2]
console.log(cq.arrUni(arr))//=>[3]
stReversal(st)
let str='abc'
console.log(cq.stReversal(sty))//cba
FAQs
The npm package cq_tool receives a total of 2 weekly downloads. As such, cq_tool popularity was classified as not popular.
We found that cq_tool demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
Socket found 37 malicious PyPI wheels that abuse Python startup hooks to launch a Bun-powered credential stealer tied to Mini Shai-Hulud/Miasma.

Security News
RubyGems and Bundler 4.0.13 introduced an opt-in cooldown feature that delays newly published gems during dependency resolution.

Security News
pnpm 11.5 now recognizes npm staged publish approvals in release metadata, preventing those releases from being mistaken for lower-trust package publishes.