
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
Requirements:
Node.js
npm
npm install --save mod-crypto
ES6 import for typical API call signing use case :
import ModCrypto from "mod-crypto"
/* enCrypto & deCrypto String with CryptoKey
* CryptoKey expect String 16length,only number or letter characters
* if you typing wrong value of CryptoKey ,crypto won't be working
*/
let AC1=new ModCrypto('SDRd!@#Areqd1234');
var beforStr = AC1.enCryptoStr("hello world!");
var afterStr = AC1.deCryptoStr(beforStr)
console.log(beforStr,afterStr);// "hello world!","hello world!"
// enCrypto & deCrypto String without CryptoKey
let AC2=new ModCrypto();// console.warn wrong key
var beforStr2 = AC2.enCryptoStr("hello world!"); //crypto won't be working
var afterStr2 = AC2.deCryptoStr(beforStr2)
console.log(beforStr2,afterStr2);// "hello world!","hello world!"
// enCrypto & deCrypto Object with CryptoKey
let AC3=new ModCrypto('SDRd!@#Areqd1234');
var beforStr3 = AC3.enCryptoDataToStr({name:"mod"});
var afterStr3 = AC3.deCryptoStrToData(beforStr3)
console.log(beforStr3,afterStr3);
expect String 16 length,only English number or letter characters. if setup with wrong value, crypto will not working!
enCrypto String message
dnCrypto CryptedString message
enCrypto [Object Array Boolean] message ,return CryptedString
input CryptedString return dnCrypto [Object Array Boolean] message
but if message can't deCrypto as [Object Array Boolean]
return null
import ModCrypto from "mod-crypto"
let AC3=new ModCrypto('SDRd!@#Areqd1234');
var beforStr3 = AC3.enCryptoDataToStr({name:"mod"});
var afterStr3 = AC3.deCryptoStrToData(beforStr3)
console.log(beforStr3,afterStr3); // 6552505ff6965eeee2e9e0dd3342 , {name:"mod"}
var beforStr4 = AC3.enCryptoDataToStr("hello world!");
var afterStr4 = AC3.deCryptoStrToData(beforStr3)
console.log(beforStr4,afterStr4); // 3c185b52f79c5ca3aff6e3dd301d , null
FAQs
aes minisize 128 256 512 web crypto
We found that mod-crypto demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.