
Research
Malicious Go “crypto” Module Steals Passwords and Deploys Rekoobe Backdoor
An impersonated golang.org/x/crypto clone exfiltrates passwords, executes a remote shell stager, and delivers a Rekoobe backdoor on Linux.
lodash.toarray
Advanced tools
The modern build of lodash’s _.toArray exported as a Node.js/io.js module.
Using npm:
$ {sudo -H} npm i -g npm
$ npm i --save lodash.toarray
In Node.js/io.js:
var toArray = require('lodash.toarray');
See the documentation or package source for more details.
The arrayify package is a simple utility that ensures a value is an array. If the value is not already an array, it wraps it in one. This is similar to lodash.toarray but is more focused on ensuring the value is an array rather than converting array-like objects.
The to-array package converts an array-like object to an array. It is similar to lodash.toarray in that it focuses on converting array-like objects, but it does not provide the additional functionality of converting strings or objects to arrays.
The array-from package is a ponyfill for Array.from, which converts array-like or iterable objects to arrays. It is similar to lodash.toarray but is specifically a polyfill for the ES6 Array.from method.
FAQs
The lodash method `_.toArray` exported as a module.
The npm package lodash.toarray receives a total of 365,752 weekly downloads. As such, lodash.toarray popularity was classified as popular.
We found that lodash.toarray demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 3 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
An impersonated golang.org/x/crypto clone exfiltrates passwords, executes a remote shell stager, and delivers a Rekoobe backdoor on Linux.

Security News
npm rolls out a package release cooldown and scalable trusted publishing updates as ecosystem adoption of install safeguards grows.

Security News
AI agents are writing more code than ever, and that's creating new supply chain risks. Feross joins the Risky Business Podcast to break down what that means for open source security.