
Research
Malicious fezbox npm Package Steals Browser Passwords from Cookies via Innovative QR Code Steganographic Technique
A malicious package uses a QR code as steganography in an innovative technique.
Jellyscript is an esoteric programming language that will screw with your life since it only has 10 commands and can barely even do anything. Jellyscript runs on your browser using HTML and the Jellyscript's interpreter written in Javascript.
You can install Jellyscript with:
Github:
git clone https://github.com/nguyenphuminh/Jellyscript.git
NPM:
npm install --save-dev jelscript
Add this to your .html file:
<script type="text/jellyscript">
This is where you write your codes
</script>
<script src="jellyscript.min.js"></script>
Or:
<script type="text/jellyscript">
This is where you write your codes
</script>
<script src="https://unpkg.com/jelscript@0.1.0/jellyscript.min.js"></script>
Jellyscript use an array with 100000 cells, every cells starts with the value of 0. Your codes will interact with each cells to work.
Any other characters are referred as comments, which will be ignored.
Shows current version:
fls --version
This language is licensed under the MIT License
Copyrights © 2020 Nguyen Phu Minh
FAQs
An esoteric scripting/programming language (esolang) that's dumb
We found that jelscript demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
A malicious package uses a QR code as steganography in an innovative technique.
Research
/Security News
Socket identified 80 fake candidates targeting engineering roles, including suspected North Korean operators, exposing the new reality of hiring as a security function.
Application Security
/Research
/Security News
Socket detected multiple compromised CrowdStrike npm packages, continuing the "Shai-Hulud" supply chain attack that has now impacted nearly 500 packages.