
Research
Malicious npm Package Brand-Squats TanStack to Exfiltrate Environment Variables
A brand-squatted TanStack npm package used postinstall scripts to steal .env files and exfiltrate developer secrets to an attacker-controlled endpoint.
isbinaryfile
Advanced tools
Detects if a file is binary in Node.js using ✨promises✨. Similar to Perl's -B switch, in that:
null byte; if it's found, it's binaryMuch of the logic is pretty much ported from ag.
Note: if the file doesn't exist or is a directory, an error is thrown.
npm install isbinaryfile
Returns Promise<boolean> (or just boolean for *Sync). true if the file is binary, false otherwise.
filepath - a string indicating the path to the file.bytes - a Buffer of the file's contents.size - an optional number indicating the file size.filepath - a string indicating the path to the file.bytes - a Buffer of the file's contents.size - an optional number indicating the file size.Here's an arbitrary usage:
const isBinaryFile = require("isbinaryfile").isBinaryFile;
const fs = require("fs");
const filename = "fixtures/pdf.pdf";
const data = fs.readFileSync(filename);
const stat = fs.lstatSync(filename);
isBinaryFile(data, stat.size).then((result) => {
if (result) {
console.log("It is binary!")
}
else {
console.log("No it is not.")
}
});
const isBinaryFileSync = require("isbinaryfile").isBinaryFileSync;
const bytes = fs.readFileSync(filename);
const size = fs.lstatSync(filename).size;
console.log(isBinaryFileSync(bytes, size)); // true or false
Run npm install, then run npm test.
The isbinaryfile package is another option for determining if a file is binary or text. It offers similar functionality to the isbinaryfile package, allowing you to check files by path or buffer.
The file-type package can detect the file type of a buffer or stream. While it is more focused on identifying the file type rather than just determining if it is binary, it can be used to achieve similar results by checking the detected file type.
The binaryextensions package provides a list of binary file extensions. While it does not directly check if a file is binary, it can be used in conjunction with file extension checks to determine if a file is likely to be binary.
FAQs
Detects if a file is binary in Node.js. Similar to Perl's -B.
The npm package isbinaryfile receives a total of 9,858,470 weekly downloads. As such, isbinaryfile popularity was classified as popular.
We found that isbinaryfile demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
A brand-squatted TanStack npm package used postinstall scripts to steal .env files and exfiltrate developer secrets to an attacker-controlled endpoint.

Research
Compromised SAP CAP npm packages download and execute unverified binaries, creating urgent supply chain risk for affected developers and CI/CD environments.

Company News
Socket has acquired Secure Annex to expand extension security across browsers, IDEs, and AI tools.