Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
node-red-contrib-ecolect
Advanced tools
A node-red node for natural language matching using Ecolect.
A Node Red node that is a wrapper around the Ecolect natural language matching library.
This node takes a plain text string and tries to match it to one of the configured intents using fuzzy pattern matching of training phrases. The node can also extract values from the string such as numbers, dates, times, and sub-strings.
Messages for each topic are sent on separate outputs so that they can be processed by a flow specific to that topic. The last output is always for messages that the processor could not recognise.
The output message contains the matched topic and the extracted values. All other message properties are passed through unchanged.
The node configuration provides the information to train the natural language matcher about the topics it should attempt to match. The configuration for each topic consists of:
The natural language matcher uses fuzzy logic to determine the match between the message text and the specified phrases to identify the best matching topic. Simple variations of specified phrases should be matched but the more phrases that are specified the better the matching. If you use enumerations for values that have a small set of known values, then the matching will be much better.
Matches the following phrases:
FAQs
A node-red node for natural language matching using Ecolect.
The npm package node-red-contrib-ecolect receives a total of 3 weekly downloads. As such, node-red-contrib-ecolect popularity was classified as not popular.
We found that node-red-contrib-ecolect demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.