
Research
/Security News
9 Malicious NuGet Packages Deliver Time-Delayed Destructive Payloads
Socket researchers discovered nine malicious NuGet packages that use time-delayed payloads to crash applications and corrupt industrial control systems.
joplin-plugin-jarvis
Advanced tools
[](https://zenodo.org/badge/latestdoi/568521268)  is an AI note-taking assistant for Joplin, powered by online and offline LLMs (such as OpenAI's ChatGPT or GPT-4, Hugging Face, Gemini, Universal Sentence Encoder). You can chat with it (including prompt templates), use your personal notes as additional context in the chat, automatically annotate notes, perform semantic search, or compile an automatic review of the scientific literature.
Community discussion: https://discourse.joplinapp.org/t/28316
Chat with Jarvis (from the toolbar or Tools/Jarvis menu). Each time you run the command Jarvis will append its response to the note at the current cursor position (given the previous content that both of you created).Chat with your notes (from the Tools/Jarvis menu) instead. Relevant short excerpts from your notes will be sent to the chat model in addition to the usual conversation prompt / context. To exclude certain notes from this feature, add the tag #exclude.from.jarvis to the notes you wish to exclude. You may combine regular chat and note-based chat on the same note. For more information see this guide.Find related notes toolbar button or context menu option. You may also write any query in the panel's search box.Annotate note with Jarvis to add annotations to your notes: title, summary, links and / or tags. For more information see this guide.Research with Jarvis, write what you're interested in, and optionally adjust the search parameters. Wait 2-3 minutes for all the output to appear in the note (depending on internet traffic). Jarvis will update the content as it finds new information on the web (using Semantic Scholar, Crossref, Elsevier, Springer & Wikipedia databases). In the end you will get a report with the following sections: title, prompt, research questions, queries, references, review and follow-up questions. For more information see this post.Auto-complete with Jarvis will try to extend any text at the current cursor position in the editor.Ask Jarvis and write your query in the pop-up window, or select a prompt text in the editor before running the command. You can also enhance your query with predefined (or customized) prompt templates from the dropdown lists.Edit selection with Jarvis and write your instructions in the pop-up window.Memory tokens in the settings, especially when chatting with your notes.The following table shows what is sent to the selected chat / notes models when running each command.
| Command | User prompt | Current note | Other note excerpts | All notes | Web articles | Models |
|---|---|---|---|---|---|---|
| Ask Jarvis | x | chat | ||||
| Chat | x | x | chat | |||
| Chat w/ notes | x | x | x | chat, notes | ||
| Research | x | x | chat | |||
| Edit | x | chat | ||||
| Autocomplete | x | chat | ||||
| Annotate note | x | x | chat, notes | |||
| Find related notes | x | notes | ||||
| Update note DB | x | notes |
FAQs
[](https://zenodo.org/badge/latestdoi/568521268) 
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
Socket researchers discovered nine malicious NuGet packages that use time-delayed payloads to crash applications and corrupt industrial control systems.

Security News
Socket CTO Ahmad Nassri discusses why supply chain attacks now target developer machines and what AI means for the future of enterprise security.

Security News
Learn the essential steps every developer should take to stay secure on npm and reduce exposure to supply chain attacks.