Security News
Research
Data Theft Repackaged: A Case Study in Malicious Wrapper Packages on npm
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
locate-character
Advanced tools
Get the line and column number of a specific character in a string
Get the line and column number of a particular character in a string.
npm install locate-character
, or get it from unpkg.com/locate-character.
To search for a particular character, using the index or a search string, use locate
:
import { locate } from 'locate-character';
const sample = `
A flea and a fly in a flue
Were imprisoned, so what could they do?
Said the fly, "let us flee!"
"Let us fly!" said the flea.
So they flew through a flaw in the flue.
`.trim();
// Using a character index
const index = sample.indexOf('fly');
locate(sample, index);
// -> { line: 0, column: 13, character: 13 }
// Using the string itself
locate(sample, 'fly');
// -> { line: 0, column: 13, character: 13 }
// Using the string with a start index
locate(sample, 'fly', { startIndex: 14 });
// -> { line: 2, column: 9, character: 76 }
If you will be searching the same string repeatedly, it's much faster if you use getLocator
:
import { getLocator } from 'locate-character';
const locate = getLocator(sample);
let location = locate(13);
// -> { line: 0, column: 13, character: 13 }
location = locate('fly', { startIndex: location.character + 1 });
// -> { line: 2, column: 9, character: 76 }
location = locate('fly', { startIndex: location.character + 1 });
// -> { line: 3, column: 8, character: 104 }
In some situations (for example, dealing with sourcemaps), you need one-based line numbers:
getLocator(sample, { offsetLine: 1 });
locate(sample, { offsetLine: 1 });
There's also an offsetColumn
option which is less useful in real-world situations.
MIT
FAQs
Get the line and column number of a specific character in a string
The npm package locate-character receives a total of 1,136,362 weekly downloads. As such, locate-character popularity was classified as popular.
We found that locate-character demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Research
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
Research
Security News
Attackers used a malicious npm package typosquatting a popular ESLint plugin to steal sensitive data, execute commands, and exploit developer systems.
Security News
The Ultralytics' PyPI Package was compromised four times in one weekend through GitHub Actions cache poisoning and failure to rotate previously compromised API tokens.