Security News
Research
Data Theft Repackaged: A Case Study in Malicious Wrapper Packages on npm
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
is-shared-array-buffer
Advanced tools
Is this value a JS SharedArrayBuffer? This module works cross-realm/iframe, does not depend on instanceof
or mutable properties, and despite ES6 Symbol.toStringTag.
var assert = require('assert');
var isSharedArrayBuffer = require('is-shared-array-buffer');
assert(!isSharedArrayBuffer(function () {}));
assert(!isSharedArrayBuffer(null));
assert(!isSharedArrayBuffer(function* () { yield 42; return Infinity; });
assert(!isSharedArrayBuffer(Symbol('foo')));
assert(!isSharedArrayBuffer(1n));
assert(!isSharedArrayBuffer(Object(1n)));
assert(!isSharedArrayBuffer(new Set()));
assert(!isSharedArrayBuffer(new WeakSet()));
assert(!isSharedArrayBuffer(new Map()));
assert(!isSharedArrayBuffer(new WeakMap()));
assert(!isSharedArrayBuffer(new WeakRef({})));
assert(!isSharedArrayBuffer(new FinalizationRegistry(() => {})));
assert(!isSharedArrayBuffer(new ArrayBuffer()));
assert(isSharedArrayBuffer(new SharedArrayBuffer()));
class MySharedArrayBuffer extends SharedArrayBuffer {}
assert(isSharedArrayBuffer(new MySharedArrayBuffer()));
Simply clone the repo, npm install
, and run npm test
v1.0.3 - 2024-02-20
npmignore
to autogenerate an npmignore file c4131f5
41cb419
2655b01
@ljharb/eslint-config
, aud
, available-typed-arrays
, npmignore
, object-inspect
, tape
5917f9a
823dd7a
eslint
, @ljharb/eslint-config
, aud
, es-value-fixtures
, object-inspect
, tape
6701ad4
b5119f0
@ljharb/eslint-config
, aud
38a6d72
engines.node
aac97e1
07c452d
call-bind
b8576fe
sideEffects
flag 3e6730e
FAQs
Is this value a JS SharedArrayBuffer?
The npm package is-shared-array-buffer receives a total of 20,643,059 weekly downloads. As such, is-shared-array-buffer popularity was classified as popular.
We found that is-shared-array-buffer demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Research
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
Research
Security News
Attackers used a malicious npm package typosquatting a popular ESLint plugin to steal sensitive data, execute commands, and exploit developer systems.
Security News
The Ultralytics' PyPI Package was compromised four times in one weekend through GitHub Actions cache poisoning and failure to rotate previously compromised API tokens.