
Research
Malicious Go βcryptoβ Module Steals Passwords and Deploys Rekoobe Backdoor
An impersonated golang.org/x/crypto clone exfiltrates passwords, executes a remote shell stager, and delivers a Rekoobe backdoor on Linux.
The supercharged toolkit for modern web development, AI engineering & DevTools.
dphelper is a powerful, zero-dependency utility library that brings together 45+ production-ready tools for web developers, AI engineers, and DevTools creators.
Think of it as your universal toolbox - from DOM manipulation to cryptographic operations, from real-time WebSocket handling to AI-powered token optimization. No more juggling multiple packages. One import, infinite possibilities.
"dphelper is what you'd build if you combined lodash, socket.io, and an AI SDK - but lighter."
[!IMPORTANT] Application state is currently handled through Memorio and RGS.
dphelper has evolved into a powerhouse for AI-driven applications. We've removed legacy dependencies (bye-bye jQuery!) and shifted focus to performance, modularity, and LLM optimization.
npm i dphelper --save-dev
Import it precisely once in your entry point (e.g., index.js, main.ts, or App.tsx):
import "dphelper";
// dphelper is now available globally across your entire project!
For plain HTML/CDN:
<script src="https://cdn.jsdelivr.net/npm/dphelper@latest"></script>
The new dphelper.ai module is designed for the modern AI stack (LLMs, RAG, Vector Search).
// β‘ TOON: The ultimate JSON alternative for prompts
const toonData = dphelper.ai.toon(myJsonObject);
// Efficient, compact, and deterministic.
// π Context-Aware Token Counting
const tokens = dphelper.ai.tokenCount(myJsonObject);
// Automatically calculates tokens based on the optimal TOON representation.
// π§© Smart Chunker (RAG Ready)
const chunks = dphelper.ai.chunker(longText, { size: 1000, overlap: 200 });
// π Semantic Similarity
const score = dphelper.ai.similarity(embeddingA, embeddingB);
// π§ Reasoning Extractor (DeepSeek/O1 support)
const { reasoning, content } = dphelper.ai.extractReasoning(rawAiReply);
// πΈ The AI Black Box (Snapshot)
const appStateToon = dphelper.ai.snapshot();
// Generates a complete app "mental dump" (URL, gState, Logs) optimized for LLMs.
Every tool in dphelper is now a self-contained module. Our new build system automatically:
tools/ directory.types/dphelper.d.ts.This ensures that adding new tools is instantaneous and always documented with full Intellisense support.
dphelper makes your web app feel like a native desktop application with cross-tab intelligence.
// β Auto-Recovery: Save scroll and input values across reloads/crashes
dphelper.UI.anchorContext();
// π Pulse: Real-time event bus between all open tabs (No Backend needed!)
const bus = dphelper.sync.pulse('my-app', (msg) => {
console.debug('Received from another tab:', msg);
});
bus.emit({ action: 'theme-change', value: 'dark' });
// π Interlock: Monitor how many tabs of your app are active
dphelper.browser.interlock((count) => {
console.debug(`Active tabs: ${count}`);
});
// π SSE: Modern streaming (Support for POST & Headers)
const stream = dphelper.sse.open('/api/ai', {
method: 'POST',
headers: { 'Authorization': 'Bearer ...' },
body: JSON.stringify({ prompt: 'Hello AI' })
});
stream.on('message', (data) => console.debug('Chunk:', data));
stream.on('error', (err) => console.error('Stream failure:', err));

Manage your dphelper environment, monitor memory usage, and access documentation directly from your browser.
dphelper tools are classified by their execution target to ensure stability across the stack.
| Icon | Type | Description |
|---|---|---|
| π | Client | Browser only (requires DOM, window, or navigator). |
| π₯οΈ | Server | Node.js / Bun / Deno only (access to process, fs, etc). |
| 𧬠| Isomorphic | Universal. Works in both Browser and Server (AI, Logic, Math). |
dphelper.ai: 𧬠Isomorphicdphelper.fetch: 𧬠Isomorphic (Supports Node 18+)dphelper.sse: π Client (Streaming fetch)dphelper.socket: π Client (WebSocket)dphelper.sync: π Client (BroadcastChannel)dphelper.UI: π Client (DOM based)We take security seriously. Every release is audited:
Dario Passariello - dariopassariello@gmail.com All rights reserved - Copyright (c) 2019 - 2026
FAQs
dphelper devtools for developers
The npm package dphelper receives a total of 933 weekly downloads. As such, dphelper popularity was classified as not popular.
We found that dphelper demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago.Β It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
An impersonated golang.org/x/crypto clone exfiltrates passwords, executes a remote shell stager, and delivers a Rekoobe backdoor on Linux.

Security News
npm rolls out a package release cooldown and scalable trusted publishing updates as ecosystem adoption of install safeguards grows.

Security News
AI agents are writing more code than ever, and that's creating new supply chain risks. Feross joins the Risky Business Podcast to break down what that means for open source security.