
Research
/Security News
Malicious npm Packages Target WhatsApp Developers with Remote Kill Switch
Two npm packages masquerading as WhatsApp developer libraries include a kill switch that deletes all files if the phone number isn’t whitelisted.
┌──────────┒
│ fsos ┃
┕━━━━┯━━━━━┛
│
╭──────────────┴───────────────╮
│ A file system object storage │
╰──────────────────────────────╯
File system IO can be hard to get right. This library offers a simpler interface to common operations expected from an object storage. It stays as close to the file system as humanly possible.
var fsos = require('fsos')
var user = { nick: 'jade', firstName: 'Jackie', lastName: 'Dent'}
fsos.set('user/' + user.nick, JSON.stringify(user)).then(function() {
return fsos.get('user/' + user.nick)
}).then(function(value) {
console.log(value)
})
If an object is set successfully, all subsequent gets will return the value that was set until the object is reset.
If an object is set non-successfully, all subsequent gets will return the value it had prior, if any, until the object is reset.
It should stay consistent even if the application crashes or if multiple processes write to the same files. If the system crashes, it is likely to stay consistent, but that depends on the file system.
set(key, value) → Promise
Sets the value at that key. It is stored directly on a file (treating the key as
a path, automatically creating folders as needed).
The value can be a Buffer, a String, or a JSON-serializable object.
Folders (eg. foo
if something was set to foo/bar
) cannot contain data.
get(key) → Promise
Reads the value at that key. Yields an error if the key does not exist.
delete(key) → Promise
Ensures that a subsequent get yields an error.
exists (to get a boolean describing whether there is data at a key) is left out. Indeed, that information does not guarantee that there will be data at that key for your next operation, as other processes may have modified it.
FAQs
A file system object storage.
The npm package fsos receives a total of 30 weekly downloads. As such, fsos popularity was classified as not popular.
We found that fsos demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
/Security News
Two npm packages masquerading as WhatsApp developer libraries include a kill switch that deletes all files if the phone number isn’t whitelisted.
Research
/Security News
Socket uncovered 11 malicious Go packages using obfuscated loaders to fetch and execute second-stage payloads via C2 domains.
Security News
TC39 advances 11 JavaScript proposals, with two moving to Stage 4, bringing better math, binary APIs, and more features one step closer to the ECMAScript spec.