Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
🔑 This method is very simple but provides a high level of security in terms of safety.
This method, inspired by the film Oppenheimer, is derived from the concept of an atomic explosion. It works by visualizing a string, encoded using the SHA-256 or SHA-512 method, as a specific number of atoms placed together. In an atomic explosion, almost all atoms are destroyed, but our goal is to mathematically make the reverse engineering probability almost zero. Therefore, we remove several specific character sequences from the strings and then re-encode the resulting string using the SHA-256 or SHA-512 method.
Delium has two method for encryption, 1-Simple delium 2-Complex delium.
In simple delium input string will hash with sha-256/sha-512 and in every cycle of hashing will delete specific chars from hashid string. But in complex delium, we have a path
for adding and deleting for every cycle.
D256
Processes a string data by first hashing it with SHA-256, then repeatedly deleting characters from the resulting hash string at specified intervals, and finally hashing the modified string again with SHA-256.
Parameters:
strData
: A string representing the data to be processed and hashed.deleteStep
: An integer specifying the interval at which characters will be deleted from the hash string.repeat
: An integer specifying how many times the deletion process should be applied.Returns:
D_hash
struct containing:
Buffer
: A buffer of the final SHA-256 hash after applying the deletion process the specified number of times.String
: A hexadecimal string representation of the final SHA-256 hash.D512
Processes a string data by first hashing it with SHA-512, then repeatedly deleting characters from the resulting hash string at specified intervals, and finally hashing the modified string again with SHA-512.
Parameters:
strData
: A string representing the data to be processed and hashed.deleteStep
: An integer specifying the interval at which characters will be deleted from the hash string.repeat
: An integer specifying how many times the deletion process should be applied.Returns:
D_hash
struct containing:
Buffer
: A buffer of the final SHA-512 hash after applying the deletion process the specified number of times.String
: A hexadecimal string representation of the final SHA-512 hash.Processes a string data by first hashing it with SHA-256, then add strings based on path to the end of hashed string and delete chars based on path. Path can has NOT any addon string but must has at least the deleting chars number.
Path example:
"2h4usk#5/73uytg#9/#4"
In this path we use delium 3 times. First we use delium with adding 2h4usk
to end of hashing and deleting chars based on 5
intervals. Then we add 73uytg
to end of new hash and delete every chars based on 9
intervals. At least we DONT add any string but we do simple delium just once with 4
delete step.
⚠️⚠️⚠️ PATH STRING NOT HAS ANY SPACE ⚠️⚠️⚠️
D256C
Parameters:
strData
: A string representing the data to be processed and hashed.path
: A string representing the path of complex delium.Returns:
D_hash
struct containing:
Byte_slice
: A byte slice of the final SHA-256 hash after applying the complex delium.String
: A hexadecimal string representation of the final SHA-256 hash.D512C
Parameters:
strData
: A string representing the data to be processed and hashed.path
: A string representing the path of complex delium.Returns:
D_hash
struct containing:
Byte_slice
: A byte slice of the final SHA-512 hash after applying the complex delium.String
: A hexadecimal string representation of the final SHA-512 hash.npm i deliumjs
import { D256 } from "deliumjs";
import { D256 , D256C } from "deliumjs";
...
// Simple delium
const simpleDelium = D256("example mnemonic", 3, 5)
console.log("buffer:", simpleDelium.Buffer) // prints the buffer of the simple delium hash
console.log("Hex String:", simpleDelium.String) // prints the hexadecimal string of the simple delium hash
// Complex delium
const path = "2h4usk#5/73uytg#9/#4"
const complexDelium = D256C("example mnemonic", path)
console.log("buffer:", complexDelium.Buffer) // prints the buffer of the complex delium hash
console.log("Hex String:", complexDelium.String) // prints the hexadecimal string of the complex delium hash
FAQs
🔑 Encryption method based on deleting
We found that deliumjs demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.