
Security News
/Research
Wallet-Draining npm Package Impersonates Nodemailer to Hijack Crypto Transactions
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
laser500-exomizer
Advanced tools
Exomizer self extracting build tool for Laser 500.
Takes an exomized Laser 500 program and turns it into a self extracting executable.
The self-extractor uses the Z80 deexo.asm
routine relocated at the address $F500.
After decompression, the system VARTAB
pointer is set according to the uncompressed
file length. That can be overidden for special cases (e.g. multiple chunks programs)
with the -v
option which sets explicitly the VARTAB
pointer.
npm i -g laser500-exomizer
After installation, you can call the command exolaser
from the prompt.
Example:
First create the exomized data bytes from AMSTERD.bin. It's assumed
that exomizer.exe
is already installed and in the path.
exomizer.exe raw -P0 amsterd.bin -o amsterd.exo.dat
Now create the Laser 500 self extracting program amsterd.exo.bin
exolaser -i amsterd.exo.dat -u amsterd.bin -o amsterd.exo.bin
You can also test decompression with the test_deexo
command.
It runs the deexo routine in a simulated Z80 environment using the given parameters.
Example
test_deexo -o amsterd.bin 8995 -c amsterd.exo.dat e400
amsterd.bin
is the original uncompressed file8995
is the memory address where the file will be decompressed toamsterd.exo.dat
is the exomized bytes filee400
is the memory address where to put the exomized data bytesThere is also a -b
option that switches to backward compression using
the Z80 assembler routine deexo_b.asm
. It requires that the exomized data bytes
are created with the exomizer -b
option.
Backward compression is used when the compressed data have to be placed in memory before the decompressed section. Normal forward compression is used when the compressed data are placed after the decompressed section.
FAQs
Exomizer self extracting build tool for Laser 500.
The npm package laser500-exomizer receives a total of 0 weekly downloads. As such, laser500-exomizer popularity was classified as not popular.
We found that laser500-exomizer demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
/Research
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
Security News
This episode explores the hard problem of reachability analysis, from static analysis limits to handling dynamic languages and massive dependency trees.
Security News
/Research
Malicious Nx npm versions stole secrets and wallet info using AI CLI tools; Socket’s AI scanner detected the supply chain attack and flagged the malware.