
Security News
/Research
Wallet-Draining npm Package Impersonates Nodemailer to Hijack Crypto Transactions
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
gulp-ts-pkg-app
Advanced tools
MD5Dumper is a tool that:
MD5Dumper aims to automatise file system synchronization between distinct ends. Intended specially for auto-patch servers.
Due to the way auto-patch servers interact with clients, data traffic on each check is really important to optimize. MD5Dumper attempts to minimize the size of data interchanged between those checks.
An Fsmap is a canonical representation of a directory. It is generated by recursively traversing a directory in a sorted way and creating MD5 hashes of every file's content + file's relative path.
declare type Fsmap = FsmapEntry[];
declare type FsmapEntry = {
index: number; // Index to ensure traverse order
path?: string; // Relative file system path
md5: string; // h(relativePath + content)
};
./target
for this example)./target
dir and store it under ./autopatcher/build.fsmap
. This file will be used to deserialize on the server side, client won't need this one../target
and store it under ./autopatcher/build.min.fsmap
./target
and store it under ./autopatcher/summary.md5
build.min.fsmap
and summary.md5
. (They will need them to perform checksum :p)summary.md5
from the server and compare with local fsmap's summary.build.min.fsmap
from the server.build.min.fsmap
and local fsmap. The diff functionality of MD5Dumper will yield "invalid local files" and "missing file indices".FAQs
A tool to dump versions for easy delta data interchange.
The npm package gulp-ts-pkg-app receives a total of 1 weekly downloads. As such, gulp-ts-pkg-app popularity was classified as not popular.
We found that gulp-ts-pkg-app demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
/Research
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
Security News
This episode explores the hard problem of reachability analysis, from static analysis limits to handling dynamic languages and massive dependency trees.
Security News
/Research
Malicious Nx npm versions stole secrets and wallet info using AI CLI tools; Socket’s AI scanner detected the supply chain attack and flagged the malware.