Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
dgram-browserify
Advanced tools
Kind of udp support for the browser : replace the dgram module. Behind the scene, a socket.io/udp proxy makes this possible.
dgram-browserify is a wrapper around simudp for automatic browserify support.
Be careful, for the moment, the main browserify version provides a broken implementation of Buffer. That's why this version should be used..
$ npm install dgram-browserify
Server-side, the proxy server should be launched :
var server = require('http').createServer();
require('dgram-browserify').listen(server);
server.listen(8080);
Note : see listen options
Browser-side with browserify :
var dgram = require('dgram');
//be sure Buffer is present
var Buffer = require('buffer').Buffer;
var socket = dgram.createSocket('udp4');
var hello = new Buffer('hello');
socket.send(hello, 0, hello.length, 3000, 'anywhere.com');
socket.on('message', function(buf, rinfo) {
//...
});
//you've understood, it's dgram for the browser...
FAQs
dgram module for the browser thru a proxy based on socket.io
We found that dgram-browserify demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.