
Research
Malicious npm Packages Impersonate Flashbots SDKs, Targeting Ethereum Wallet Credentials
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
A braindead module for reading and writing netstrings.
nsWriteLength(len)
Compute the number of bytes to required serialize a netstring with the len
bytes.
nsWrite(pay, payStart = 0, payEnd = pay.length, buf = undefined, bufOff = 0)
Write the payload pay
out in netstring format, returning a string. The
payStart
and payEnd
parameters allow specifying a range for the payload
and default to the entire object. Like Buffer.slice()
, this payStart
is
inclusive and payEnd
is exclusive. The pay
parameter can be either a
string or a Buffer
object.
If the buf
parameter is specified, the netstring is written to this buffer
rather than returned as a string. The bufOff
parameter allows specifying
the offset into the buffer at which to begin writing. The length of the
resulting netstring in bytes is returned.
nsPayload(buf, off = 0)
Get the payload of the netstring pointed to by the given buf
object at
offset off
. Despite its name, buf
, can be either a string or a Buffer
.
The returned value will be of the same type as the buf
parameter or a
negative integer value in following the error taxonomy of
nsPayloadLength()
.
nsPayloadLength(buf, off = 0)
Get the length of the payload pointed to by the given buf
object at offset
off
. Despite its name, buf
, can be either a string or a Buffer
. The
length returned is only that of the payload; it does not include the header
or footer. The returned value will be -1 if the buffer does not include
enough data to make a complete length calculation.
nsLength(buf, off = 0)
Get the length of the netstring pointed to by the given buf
object at
offset off
. Despite its name, buf
, can be either a string or a Buffer
.
The length returned includes the length of the header and footer in addition
to the payload. Negative values follow the taxonomy from nsPayloadLength()
.
FAQs
A netstring implementation
The npm package netstring receives a total of 328 weekly downloads. As such, netstring popularity was classified as not popular.
We found that netstring demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 3 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
Security News
Ruby maintainers from Bundler and rbenv teams are building rv to bring Python uv's speed and unified tooling approach to Ruby development.
Security News
Following last week’s supply chain attack, Nx published findings on the GitHub Actions exploit and moved npm publishing to Trusted Publishers.