Security News
Research
Data Theft Repackaged: A Case Study in Malicious Wrapper Packages on npm
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
fastfile is a package to read/write binary files with a transparent cache.
This library maintains a read and write cache that allows to write asynchronously improving the speed of the reads and writes of big files.
npm install fastfile
const fastFile = require("fastfile");
async function writeFile() {
const f = await fastFile.createOverride("pattern.bin");
const buff = Buffer.from("0001020304050607", "hex");
for (let i=0; i<1000; i++) {
await f.write(buff, i*8);
}
await f.close();
}
async function readFile() {
const f = await fastFile.readExisting("pattern.bin");
const buff = await f.read(16, 8);
await f.close();
return buff;
}
writeFile().then( () => {
readFile().then( (buff) => {
console.log(buff.toString("hex"));
});
});
fastfile is part of the iden3 project copyright 2018 0KIMS association and published with GPL-3 license. Please check the COPYING file for more details.
FAQs
fast cached read write of big binary files
The npm package fastfile receives a total of 7,244 weekly downloads. As such, fastfile popularity was classified as popular.
We found that fastfile demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Research
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
Research
Security News
Attackers used a malicious npm package typosquatting a popular ESLint plugin to steal sensitive data, execute commands, and exploit developer systems.
Security News
The Ultralytics' PyPI Package was compromised four times in one weekend through GitHub Actions cache poisoning and failure to rotate previously compromised API tokens.