
Research
Security News
Malicious npm Packages Use Telegram to Exfiltrate BullX Credentials
Socket uncovers an npm Trojan stealing crypto wallets and BullX credentials via obfuscated code and Telegram exfiltration.
data-uri-doer
Advanced tools
Encode and decode data uris as specified in RFC2397.
npm install data-uri-doer
Initialize uri instance
var data = '<p>Some data to encode.</p>';
var type = 'text/html';
var attr = {
charset: 'UTF-8'
};
var dud = new DataUriDoer(data, type, attr);
Access uri properties
var data = dud.data;
dud.data = data;
var type = dud.type;
dud.type = type;
var attr = dud.attr;
dud.attr = attr;
var charset = dud.attr.charset;
dud.attr.charset = charset;
Convert instance to string
var string = dud.toString()
Convert instance to base64 string
var base64 = dud.toString(true)
Parse string
var dud = DataUriDoer.parse(string)
Parse string using fallback mime type and charset, which will be used in case it is not specified by the data uri.
var dud = DataUriDoer.parse(string, 'text/html', 'UTF-8')
As specified in RFC2397 the default mime type is text/plain
and the default charset is US-ASCII
.
During parsing, these values will be used as fallback if is not given:
var dud = DataUriDoer.parse('data:,some%20data');
console.log(dud.data); // -> data
console.log(dud.mime); // -> text/plain
console.log(dud.attr.charset); // -> US-ASCII
During converting, the default values will be removed:
var dud = new DataUriDoer('some data', 'text/plain', {charset: 'US-ASCII'});
console.log(dud.toString()); // -> data:,some%20data
FAQs
Encode and decode data uris.
We found that data-uri-doer demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket uncovers an npm Trojan stealing crypto wallets and BullX credentials via obfuscated code and Telegram exfiltration.
Research
Security News
Malicious npm packages posing as developer tools target macOS Cursor IDE users, stealing credentials and modifying files to gain persistent backdoor access.
Security News
AI-generated slop reports are making bug bounty triage harder, wasting maintainer time, and straining trust in vulnerability disclosure programs.