
Security News
/Research
Wallet-Draining npm Package Impersonates Nodemailer to Hijack Crypto Transactions
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
A set of small utility function that may not fit in any other package.
Creates a v4
uuid.
Is basically a wrapper around the npm package uuid
.
For options see here
import {uuid} from 'ecc-utils';
const id = uuid();
Wrapper around URI.js.
import {URI} from 'ecc-utils'
const newURI = new URI('http://example.org');
//Our wrapper adds this check:
//Returns true if URI is urn-like or an absolute URL
newURI.is('resourceURI');
Change a favicon of a website dynamically.
import {changeFavicon} from 'ecc-utils';
changeFavicon(
"data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAACAAAAAgAQMAAABJtOi3AAAABlBMVEUAAAD+jwHRIVMHAAAAAXRSTlMAQObYZgAAAHlJREFU" +
"CNctzbEJAzEQRNF/KBAGw6aOtG04EHJbFwisElzSlqISFCo4Tl7sg+EFE8yADC6C/biDzgTvs8A6K9s6JmHcBtFCR1o0BPmgD32SctkppVayzkyW4cTuBH" +
"O25uBJsP9RmEhjILb5aI+dMNX8aDVYC3gdjvdfRm8rdNXB000AAAAASUVORK5CYII="
);
Retrieve preferred locales by the user. Values are read from the window.navigator
object
import {getBrowserLocales} from 'ecc-utils';
//Returns for example ['de-AT', 'de', 'en']
getBrowserLocales();
Returns best match between a list of preferred locales and supported locales.
Preferred locales default to getBrowserLocales
and order is important (First in array is most important locale).
If no match can be found a default locale will be returned.
import {getBestLocale} from 'ecc-utils';
//returns 'en' (default value)
getBestLocale();
//returns 'de' (default value)
getBestLocale({defaultLocale: 'de'});
//suppose a user has a preference of ['de-AT', 'en'] in their browser
//returns 'de'
getBestLocale({supportedLocales: ['de', 'en']});
//returns 'en-AU'
getBestLocale({
preferredLocales: ['de-AT', 'en'],
supportedLocales: ['en-AU', 'ru-RU'],
});
//Sometimes order matters in supportedLocales
//suppose a user has a preference of ['en-US', 'de'] in their browser
//returns 'en'
getBestLocale({supportedLocales: ['en', 'en-AU', 'de']});
//returns 'en-AU'
getBestLocale({supportedLocales: ['en-AU', 'en', 'de']});
Transform all not common letters like 'ö,ä,ü,é' to standard latin and replace all special characters like '$,],¶' to a single '_' from a given string.
Has optional parameter ensureType
in options
import {sanitizeFileName} from 'ecc-utils';
string = '<oxo|{[¢$frmble?.csv';
//Returns 'oxo_frmble.csv'
sanitizeFileName(string, {ensureType: 'csv'});
Helps to convert Spring Property Objects to proper Javascript Objects
const input = {
'foo.bar.string': '123',
'foo.bar.array': ["a", "b", "c"],
'[http://example.org]foo.bar': {
'a.b': 12
}
};
const output =
{
"foo": {
"bar": {
"array": [
"a",
"b",
"c",
],
"string": "123"
}
},
"http://example.org": {
"foo": {
"bar": {
"a": {
"b": 12
}
}
}
}
}
;
should(convertSpringPropertyObject(input)).deepEqual(output);
[1.4.0] 2017-08-18
convertSpringPropertyObject
for convert Spring Property Objects into their proper js representationFAQs
A set of small utility function that may not fit in any other package
The npm package ecc-utils receives a total of 64 weekly downloads. As such, ecc-utils popularity was classified as not popular.
We found that ecc-utils demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 3 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
/Research
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
Security News
This episode explores the hard problem of reachability analysis, from static analysis limits to handling dynamic languages and massive dependency trees.
Security News
/Research
Malicious Nx npm versions stole secrets and wallet info using AI CLI tools; Socket’s AI scanner detected the supply chain attack and flagged the malware.