
Security News
/Research
Wallet-Draining npm Package Impersonates Nodemailer to Hijack Crypto Transactions
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
distinguishable
Advanced tools
Create a string and parse a string to a standard set of characters
For order references it is important to not have any problems created by users mistyping information e.g. on a wiretransfer reference. Thus I looked at the characters of a european keyboard and tried to find all possible misinterpretations of letters either alone or as groups.
These are my findings of similiar looking characters:
o, O, Q, ö, Ö, 0
i, I, l, L, |, j, J, ı, 1
z, Z, 2
a, A, 4
s, S, 5
B, 8
g, q
q, 9
6, b
e, f
m, n
u, v
rn, m
vv, w
The final result should in my opinion only consist of Capital Letters and Numbers. Thus the list of letters to create a random string is the following:
CDEHKMPRSTUWXY012458
totaling 20 chars.
$ npm install distinguishable
var distinguishable = require('distinguishable');
Choose a different string length:
console.log(distinguishable.create(12));
// UXYYTHUMU8
Parse string:
console.log(distinguishable.parse("U4I1o00"));
// U411000
console.log(distinguishable.parse("UaILo0ö"));
// U411000
vows test/test.js
See the issue tracker.
Thomas Schaaf (schaaf@komola.de). Development was sponsored by komola.
Big thanks go to SDA Software Associates Inc. who created passgen and greatly inspired the structure.
FAQs
Distinguishable random string generator
We found that distinguishable demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
/Research
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
Security News
This episode explores the hard problem of reachability analysis, from static analysis limits to handling dynamic languages and massive dependency trees.
Security News
/Research
Malicious Nx npm versions stole secrets and wallet info using AI CLI tools; Socket’s AI scanner detected the supply chain attack and flagged the malware.