
Research
/Security News
9 Malicious NuGet Packages Deliver Time-Delayed Destructive Payloads
Socket researchers discovered nine malicious NuGet packages that use time-delayed payloads to crash applications and corrupt industrial control systems.
fsx-coreIf you find this useful, please consider supporting my work with a donation or nominate me for a GitHub Star.
The core functionality for fsx that is shared across all implementations for all runtimes. The contents of this package are intentionally runtime agnostic and are not intended to be used alone.
Currently, this package simply exports the Fsx class, which is an abstract base class intended to be inherited from in runtime-specific fsx packages (like fsx-node).
[!WARNING] This project is experimental and may change significantly before v1.0.0. Use at your own caution and definitely not in production!
Install using your favorite package manager for Node.js:
npm install fsx-core
# or
pnpm install fsx-core
# or
yarn add fsx-core
# or
bun install fsx-core
Then you can import the Fsx class like this:
import { Fsx } from "fsx-core";
For Deno, set up a deno.json file like this:
{
"imports": {
"fsx-core": "npm:fsx-core@latest"
}
}
Then you can import the Fsx class like this:
import { Fsx } from "fsx-core";
It's recommended to import the minified version to save bandwidth:
import { Fsx } from "https://cdn.skypack.dev/fsx-core?min";
However, you can also import the unminified version for debugging purposes:
import { Fsx } from "https://cdn.skypack.dev/fsx-core";
The Fsx class contains all of the basic functionality for an Fsx instance without a predefined impl. This class is mostly used for creating runtime-specific impls, such as NodeFsx and DenoFsx.
You can create your own instance by providing an impl directly:
const fsx = new Fsx({ impl: { async text() {} }});
The specified impl becomes the base impl for the instance, meaning you can always reset back to it using resetImpl().
You can also inherit from Fsx to create your own class with a preconfigured impl, such as:
class MyFsx extends Fsx {
constructor() {
super({
impl: myImpl
});
}
}
Apache 2.0
FAQs
The core of the fsx library.
The npm package fsx-core receives a total of 2 weekly downloads. As such, fsx-core popularity was classified as not popular.
We found that fsx-core demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
Socket researchers discovered nine malicious NuGet packages that use time-delayed payloads to crash applications and corrupt industrial control systems.

Security News
Socket CTO Ahmad Nassri discusses why supply chain attacks now target developer machines and what AI means for the future of enterprise security.

Security News
Learn the essential steps every developer should take to stay secure on npm and reduce exposure to supply chain attacks.