Research
Security News
Quasar RAT Disguised as an npm Package for Detecting Vulnerabilities in Ethereum Smart Contracts
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
Finds multiple open ports after your specified base ports, and below the max range.
Unlike getport or get-port, this is useful for situations where you need multiple servers to run on open ports.
If not all ports could be found, the error callback is triggered.
npm install get-ports --save
The resulting ports
array is parallel to your input (base) ports.
For example, if port 8000
and 9966
are already in use:
var getPorts = require('get-ports')
getPorts([ 8000, 9966 ], function (err, ports) {
if (err) throw new Error('could not open servers')
console.log(ports)
//=> [ 8001, 9967 ]
})
getPorts(basePorts, [maxPort], callback)
For the given array of basePorts
, tries to find the next available port from each one. This keeps track of available ports to ensure there are no conflicts in the final result.
If the finite number maxPort
is specified, the portfinding will fail when it reaches that maximum port. Defaults to 60000.
The callback is called with (err, ports)
, where err
will be an Error if any of the portfindings failed (i.e. no open ports within range). If successful, err
will be null and ports
will be an array, parallel to basePorts
, with the found port numbers.
MIT, see LICENSE.md for details.
FAQs
gets multiple open ports
The npm package get-ports receives a total of 7,515 weekly downloads. As such, get-ports popularity was classified as popular.
We found that get-ports demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
Security News
Research
A supply chain attack on Rspack's npm packages injected cryptomining malware, potentially impacting thousands of developers.
Research
Security News
Socket researchers discovered a malware campaign on npm delivering the Skuld infostealer via typosquatted packages, exposing sensitive data.