
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
easy-crypto-utils
Advanced tools
A set of easy-to-use cryptographic utilities for use from within projects, or from the command line.
A lightweight TypeScript library providing simple cryptographic utilities for Node.js applications, featuring both programmatic and command-line interfaces.
ecu commandnpm install easy-crypto-utils
import { encrypt } from 'easy-crypto-utils';
const encrypted = encrypt('Hello, World!', 'your-encryption-key', 'your-salt-value');
console.log(encrypted); // ECU-v2<encrypted-data>
import { decrypt } from 'easy-crypto-utils';
// For current version (ECU-v2 prefix)
const decrypted = decrypt(encrypted, 'your-encryption-key', { salt: 'your-salt-value' });
console.log(decrypted); // 'Hello, World!'
// For legacy format
const decryptedLegacy = decrypt(legacyEncrypted, 'your-encryption-key', { legacySeed: 'legacy-seed' });
import { hash } from 'easy-crypto-utils';
// Generate MD5 hash
const hashedString = hash('Hello, World!');
console.log(hashedString);
The package installs a CLI tool named ecu. Here are the available commands:
ecu --encrypt --data="Hello, World!" --key="your-encryption-key" --salt="your-salt-value"
For current version (ECU-v2 prefix):
ecu --decrypt --data="ECU-v2<encrypted-data>" --key="your-encryption-key" --salt="your-salt-value"
For legacy format:
ecu --decrypt --data="<legacy-encrypted-data>" --key="your-encryption-key" --seed="legacy-seed-value"
ecu --hash --data="Hello, World!"
ecu --version
ecu --help
encrypt(data: string, key: string, salt: string): stringEncrypts the provided data using AES-256 encryption.
data: The string to encryptkey: The encryption keysalt: Salt value used to derive the initialization vectordecrypt(data: string, key: string, seedOrSalt: { salt?: string, legacySeed?: string }): stringDecrypts the provided data.
data: The encrypted stringkey: The encryption keyseedOrSalt.salt: Salt value for current version formatseedOrSalt.legacySeed: Seed value for legacy formatNOTE: Either the salt or the legacySeed must be provided.
If salt is omitted when used with the current format,
or if legacySeed is omitted when used with the legacy format,
an error will be thrown.
hash(data: string): stringGenerates an MD5 hash of the provided data.
data: The string to hashgit clone https://github.com/Swinomish-Indian-Tribal-Community/easy-crypto-utils.git
cd easy-crypto-utils
npm install
npm run build
npm test
MIT © Swinomish Indian Tribal Community
Report issues at GitHub Issues
FAQs
A set of easy-to-use cryptographic utilities for use from within projects, or from the command line.
We found that easy-crypto-utils demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.