
Security News
Cline CLI npm Package Compromised via Suspected Cache Poisoning Attack
A compromised npm publish token was used to push a malicious postinstall script in cline@2.3.0, affecting the popular AI coding agent CLI with 90k weekly downloads.
multicast-stream
Advanced tools
Create a multicast stream that lets multiple consumers independently read the same data
Create a multicast stream that lets multiple consumers independently read the same data
npm install multicast-stream
Without this package
Using Readable#text() on a stream can only work with a single consumer. If you try to read the stream with multiple consumers, it will be empty as the stream can only be read once.
import {Readable} from 'node:stream';
import {text} from 'node:stream/consumers';
const sourceStream = Readable.from(['Hello', ' ', 'World']);
const [result1, result2] = await Promise.all([text(sourceStream), text(sourceStream)]);
console.log(result1); // 'Hello World'
console.log(result2); // ''
With this package
This package allows multiple consumers to independently read the same data from a single source stream.
import {Readable} from 'node:stream';
import {text} from 'node:stream/consumers';
import multicastStream from 'multicast-stream';
const sourceStream = Readable.from(['Hello', ' ', 'World']);
const createConsumer = multicastStream(sourceStream);
const consumer1 = createConsumer();
const consumer2 = createConsumer();
const [result1, result2] = await Promise.all([text(consumer1), text(consumer2)]);
console.log(result1); // 'Hello World'
console.log(result2); // 'Hello World'
multicastStream(sourceStream)Creates a function that returns independent streams for each consumer.
sourceStream (Readable): The source stream to multicast.() => PassThrough: A function that returns a new PassThrough stream for each consumer.FAQs
Create a multicast stream that lets multiple consumers independently read the same data
We found that multicast-stream demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
A compromised npm publish token was used to push a malicious postinstall script in cline@2.3.0, affecting the popular AI coding agent CLI with 90k weekly downloads.

Product
Socket is now scanning AI agent skills across multiple languages and ecosystems, detecting malicious behavior before developers install, starting with skills.sh's 60,000+ skills.

Product
Socket now supports PHP with full Composer and Packagist integration, enabling developers to search packages, generate SBOMs, and protect their PHP dependencies from supply chain threats.