Research
Security News
Malicious npm Package Targets Solana Developers and Hijacks Funds
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
Fast tree with live iterator. The tree can be modified while iterating over the nodes.
Repository: https://github.com/mantoni/live-tree.js
npm install live-tree
To use this module in a browser, download the npm package and then use Browserify to create a standalone version.
var Node = require('live-tree').Node;
var n = new Node('root');
n.set('a', 2);
n.set('a.b', 3);
n.set('a.c', 7);
var c, i = n.iterator();
while ((c = i.next()) !== undefined) {
console.log(c.value);
}
Node(name)
: Returns a new Node with the given name. The name must be of
type string and not empty.name
: The name of the nodevalue
: The value of the nodechildren
: The list of children (see live-list)set(name, value)
: Sets the value of the named node. If the node does not
exist, it is created and added to the children by calling _add(node)
. The
value is changed by calling _value(value)
.get(name)
: Returns the value of the named node. If the node does not exist,
undefined is returned.remove(name)
: Removes the named node. If it has children, the value is
deleted. Parent nodes in the path with no value and no remaining children
will be removed as well.node(name)
: Return the named node or undefined if the node does not exist_add(node)
: Called by set
to add a node to the children. The default
implementation does this.children.push(node);
._value(value)
: Called by set
to change the value. The default
implementation does this.value = value;
.toObject()
: Returns a plain object representation of the node and it's
childreniterator()
: Returns a new Iterator
The iterator is derived from min-iterator.
Iterator(node)
: Returns a new Iterator using the given root nodenext()
: Returns the next node in the tree. If there are no items left,
undefined
is returned.MIT
0.2.0
each(fn, scope)
and toArray()
.FAQs
Fast tree with live iterator
The npm package live-tree receives a total of 5 weekly downloads. As such, live-tree popularity was classified as not popular.
We found that live-tree demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
Security News
Research
Socket researchers have discovered malicious npm packages targeting crypto developers, stealing credentials and wallet data using spyware delivered through typosquats of popular cryptographic libraries.
Security News
Socket's package search now displays weekly downloads for npm packages, helping developers quickly assess popularity and make more informed decisions.