
Security News
/Research
Popular node-ipc npm Package Infected with Credential Stealer
Socket detected malicious node-ipc versions with obfuscated stealer/backdoor behavior in a developing npm supply chain attack.
๐๐ซ๐๐ง๐ฌ๐๐จ๐ซ๐ฆ ๐ฆ๐๐ข๐ ๐๐๐๐๐๐๐๐๐๐๐๐ ๐ผ๐ฝ๐ป๐ฒ๐ท๐ฐ ๐๐พ๐๐ฝ ๐๐ซ๐ฆ๐ ๐ฌ๐ก๐ข ๐ค๐ฆ๐ก๐ก๐๐๐๐๐๐ฅ๐๐ ๐๐๐๐๐๐๐๐๐๐.
Usage: decoji [options] [string]
Options:
-V, --version output the version number
-s, --style <style> transform style name (default: selected at random)
-l, --list list all styles
-m, --mapping show mapping for given style
-h, --help output usage information
$ decoji "Lorem ipsum dolor sit amet,"
๐๐จ๐ซ๐๐ฆ ๐ข๐ฉ๐ฌ๐ฎ๐ฆ ๐๐จ๐ฅ๐จ๐ซ ๐ฌ๐ข๐ญ ๐๐ฆ๐๐ญ,
$ decoji --style mathematical-bold-script "Lorem ipsum dolor sit amet, ..."
๐ฌ๐ธ๐ท๐ผ๐ฎ๐ฌ๐ฝ๐ฎ๐ฝ๐พ๐ป ๐ช๐ญ๐ฒ๐น๐ฒ๐ผ๐ฌ๐ฒ๐ท๐ฐ ๐ฎ๐ต๐ฒ๐ฝ, ๐ผ๐ฎ๐ญ ๐ญ๐ธ ๐ฎ๐ฒ๐พ๐ผ๐ถ๐ธ๐ญ ๐ฝ๐ฎ๐ถ๐น๐ธ๐ป ๐ฒ๐ท๐ฌ๐ฒ๐ญ๐ฒ๐ญ๐พ๐ท๐ฝ ๐พ๐ฝ ๐ต๐ช๐ซ๐ธ๐ป๐ฎ ๐ฎ๐ฝ ๐ญ๐ธ๐ต๐ธ๐ป๐ฎ ๐ถ๐ช๐ฐ๐ท๐ช ๐ช๐ต๐ฒ๐บ๐พ๐ช.
$ decoji --list | head -n 5
{
"mathematical-bold": "๐๐ก๐ ๐ช๐ฎ๐ข๐๐ค ๐๐ซ๐จ๐ฐ๐ง ๐๐จ๐ฑ ๐ฃ๐ฎ๐ฆ๐ฉ๐ฌ ๐จ๐ฏ๐๐ซ ๐ญ๐ก๐ ๐ฅ๐๐ณ๐ฒ ๐๐จ๐ . ๐๐๐๐๐๐๐๐๐๐",
"mathematical-italic": "๐h๐ ๐๐ข๐๐๐ ๐๐๐๐ค๐ ๐๐๐ฅ ๐๐ข๐๐๐ ๐๐ฃ๐๐ ๐กh๐ ๐๐๐ง๐ฆ ๐๐๐. 1234567890",
"mathematical-bold-italic": "๐ป๐๐ ๐๐๐๐๐ ๐๐๐๐๐ ๐๐๐ ๐๐๐๐๐ ๐๐๐๐ ๐๐๐ ๐๐๐๐ ๐
๐๐. 1234567890",
"mathematical-script": "๐ฏ๐ฝe ๐๐๐พ๐ธ๐ ๐ท๐o๐๐ ๐ปo๐ ๐ฟ๐๐๐
๐ o๐e๐ ๐๐ฝe ๐๐ถ๐๐ ๐นog. 1234567890",
$ decoji --mapping --style circled | head -n 5
{
"0": "โช",
"1": "โ ",
"2": "โก",
"3": "โข",
import { decorate, styleNames } from "decoji";
// styleNames; // => ["mathematical-bold", "mathematical-italic", ...]
console.log(decorate("Lorem ipsum...", "mathematical-bold-fraktur"));
FAQs
๐๐ซ๐๐ง๐ฌ๐๐จ๐ซ๐ฆ ๐ฆ๐๐ข๐ ๐๐๐๐๐๐๐๐๐๐๐๐ ๐ผ๐ฝ๐ป๐ฒ๐ท๐ฐ ๐๐พ๐๐ฝ ๐๐ซ๐ฆ๐ ๐ฌ๐ก๐ข ๐ค๐ฆ๐ก๐ก๐๐๐๐๐๐ฅ๐๐ ๐๐๐๐๐๐๐๐๐๐.
The npm package decoji receives a total of 14 weekly downloads. As such, decoji popularity was classified as not popular.
We found that decoji demonstrated a not healthy version release cadence and project activity because the last version was released a year ago.ย It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
/Research
Socket detected malicious node-ipc versions with obfuscated stealer/backdoor behavior in a developing npm supply chain attack.

Security News
TeamPCP and BreachForums are promoting a Shai-Hulud supply chain attack contest with a $1,000 prize for the biggest package compromise.

Security News
Packagist urges PHP projects to update Composer after a GitHub token format change exposed some GitHub Actions tokens in CI logs.