Security News
Research
Data Theft Repackaged: A Case Study in Malicious Wrapper Packages on npm
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
The dot-case npm package is used to convert strings into dot case, where each word or abbreviation in the string is separated by a dot (period). This is often used for creating names that are consistent with certain coding conventions or configurations where dot notation is preferred.
Convert string to dot case
This feature takes a string and converts it to dot case. For example, 'hello world' would be converted to 'hello.world'.
"hello world".split(' ').join('.');
The snake-case package converts strings to snake case, where each word is separated by an underscore. It is similar to dot-case but uses underscores instead of dots.
The param-case package converts strings to param case (also known as kebab case), where each word is separated by a dash. It is similar to dot-case in that it is used for URL slugs and CSS class names, but it uses dashes instead of dots.
The camelcase package converts strings to camel case, where the first letter of each word except the first is capitalized and all words are joined without spaces. It differs from dot-case as it is often used in programming for variable and function names.
The title-case package converts strings to title case, where the first letter of each word is capitalized. It is different from dot-case as it is used for titles and headings rather than coding conventions.
Transform into a lower case string with a period between words.
npm install dot-case --save
import { dotCase } from "dot-case";
dotCase("string"); //=> "string"
dotCase("dot.case"); //=> "dot.case"
dotCase("PascalCase"); //=> "pascal.case"
dotCase("version 1.2.10"); //=> "version.1.2.10"
The function also accepts options
.
MIT
FAQs
Transform into a lower case string with a period between words
The npm package dot-case receives a total of 14,018,049 weekly downloads. As such, dot-case popularity was classified as popular.
We found that dot-case demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Research
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
Research
Security News
Attackers used a malicious npm package typosquatting a popular ESLint plugin to steal sensitive data, execute commands, and exploit developer systems.
Security News
The Ultralytics' PyPI Package was compromised four times in one weekend through GitHub Actions cache poisoning and failure to rotate previously compromised API tokens.