
Research
/Security News
Intercom’s npm Package Compromised in Ongoing Mini Shai-Hulud Worm Attack
Compromised intercom-client@7.0.4 npm package is tied to the ongoing Mini Shai-Hulud worm attack targeting developer and CI/CD secrets.
invoke is a dead simple asynchronous flow control micro-library. Sequential (.then) and parallel (.and) async functions can be chained into simple steps:
invoke(function (data, callback) {
// I'm an async function!
}).and(function (data, callback) {
// I am too! I execute in parallel with the first function.
}).then(function (data, callback) {
// I run after both of the parallel functions have called back. Their results
// are passed to me as an array via the data arg.
}).rescue(function (err) {
// I'll be invoked if any functions in the call chain call back with an error.
}).end(initialData, function (data) {
// Calling .end initiates invocation of the set of chained steps. The final result
// is passed to this callback.
});
Because I can.
This library is an experiment in flow control, chained APIs, and minimal JS syntax (yes, I skipped all those semi-colons on purpose).
invoke can be installed via npm:
npm install invoke
The API is exposed as a single function that generates a chainable Invocable object.
var invoke = require('invoke');
invoke(function (data, callback) {
somethingAsync(function (err, results) {
callback(err, results);
});
}).then(function (data, callback) {
// and so forth
Take a look at the examples.
Adds a function as a sequential step. This function will not be invoked until all previous steps have called back, and later steps will not be invoked until this function calls back.
Adds a function as a parallel step. This function will not be invoked in parallel with any other functions chained with .and immediately before or immediately after this .and call.
Adds an error handler. This function will be invoked once if any function in the call chain calls back with an error.
Adds a final callback and initiates invocation of the function steps defined in the chain. initialValue is the initial value passed as the first argument into the first function step.
Install dev dependencies
$ npm install -d
$ npm test
$ npm run-script build
invoke.js is MIT licensed. See LICENSE.
FAQs
Simple flow control library for chaining async functions
We found that invoke demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
Compromised intercom-client@7.0.4 npm package is tied to the ongoing Mini Shai-Hulud worm attack targeting developer and CI/CD secrets.

Research
Socket detected a malicious supply chain attack on PyPI package lightning versions 2.6.2 and 2.6.3, which execute credential-stealing malware on import.

Research
A brand-squatted TanStack npm package used postinstall scripts to steal .env files and exfiltrate developer secrets to an attacker-controlled endpoint.