Research
Security News
Threat Actor Exposes Playbook for Exploiting npm to Build Blockchain-Powered Botnets
A threat actor's playbook for exploiting the npm ecosystem was exposed on the dark web, detailing how to build a blockchain-powered botnet.
json-arraybuffer-reviver
Advanced tools
Utility functions for JSON.parse and JSON.stringify to work with typed arrays and array buffers.
Utility functions for JSON.parse and JSON.stringify to work with typed arrays and array buffers.
Install the library via NPM:
# npm install json-arraybuffer-reviver
Before you can use the functionality in your project, you need to import it to your project:
// Import the Price Oracle library.
import { replacer, reviver } from 'json-arraybuffer-reviver`;
When you need to JSON.stringify()
or JSON.parse()
data that contains ArrayBuffers
, DataViews
or BigInts
, simply pass in the replacer
and reviver
functions:
// Create some data to encode.
const inputData = new Uint8Array();
// Encode the data into JSON.
const encodedData = JSON.stringify(inputData, replacer);
// Decode the data from JSON.
const outputData = JSON.parse(encodedData, reviver);
The replacer function looks at the data that you are trying to encode into JSON and instead of using the default toString()
methods it encodes the data in a human readable form as follows:
{
$BigInt: 'The integer number as a string'
}
{
$ArrayBuffer:
{
View: "Name of the ArrayBuffer or DataView type, as a string",
Data: "Hexadecimal representation of the bytes that make up the ArrayBuffer",
}
}
Currently, Internet Explorer and Safari browsers do not support BigIntArrays.
The code for these utility functions was inspired by a gist by Jimmy Wärting, but rebuilt from scratch in order to be:
FAQs
Utility functions for JSON.parse and JSON.stringify to work with typed arrays and array buffers.
We found that json-arraybuffer-reviver demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
A threat actor's playbook for exploiting the npm ecosystem was exposed on the dark web, detailing how to build a blockchain-powered botnet.
Security News
NVD’s backlog surpasses 20,000 CVEs as analysis slows and NIST announces new system updates to address ongoing delays.
Security News
Research
A malicious npm package disguised as a WhatsApp client is exploiting authentication flows with a remote kill switch to exfiltrate data and destroy files.