
Research
/Security News
9 Malicious NuGet Packages Deliver Time-Delayed Destructive Payloads
Socket researchers discovered nine malicious NuGet packages that use time-delayed payloads to crash applications and corrupt industrial control systems.
node-red-contrib-prib-functions
Advanced tools
Node-Red nodes for various functions:
Real time metrics which are recalculated on single of data point and posted in msg.result. Key and value can be selected from msg.payload. Includes lag (seasonal) along with delta(defference). Sending message with topic"@stats" places message with all stats on second port. If realtime metrics then a third port is shown where the message is sent if it is an outlier being outside 3 standard deviations from mean. This can be changed to median and number of deviations.
A set of data analysis functions that can be run over an array of data
Single value metrics:
Array metrics:
Array data
example:
Define a matrix and perform various functions

Translates a selected msg property to a target property. Messages generates a message for each row or record.
Transformations:
Array to
AVRO to JSON (uses avsc)
Buffer to compressed
Confluence to JSON
Compressed to
CSV to
CSVWithHeader to
Date to
ISO8385 to Array
ISO8385 to JSON
JSON to
Number
path
snappy compress (uses snappy, must install separately)
snappy uncompress (uses snappy, must install separately)
String to
xlsx / xlsx object to array/JSON (excel uses xlsx)
XML to JSON (uses fast-xml-parser)
Note, snappy needs to be installed separately as can have issues with auto install as build binaries.
With xlsx object one can use the function in xlsx against the object in functions node. " Example AVRO with schema

For Confluence schema contains a list of schemas in form {"",}
Allows a test case for a message to allow simple testing of nodes. Injects a new message via mouse or message. Message sent to first port which can be consumed by other nodes and returned back to node in a loop. The Test node then checks against detailed expected payload result.
example:
after run
Append file(s) to payload. Cached to maximise performance. Require can be used to find file.
Test example:
The levenshtein distance between two character strings.

Inject messages for a set period of time with varying think time. Primary purpose is testing and useful for load/stress testing.
Has 3 extra data types

Test example:
Add on wire between two flows to see message rates in status line. Rate sampled every second and provides rate last second / 10 seconds / 1 minute / 5 minutes.
Test example:
Test if host is available sending msg to up or down port so action can be taken. Message only sent on state change or if message is sent which doesn't have topic refreshHostAvailable. This topic forces a check rather than time check which can be set.
Test example:
System monitoring metrics
Test example:
The metrics from node.js os
Test example:
Spawn process as per node.js manual with ability to set working directory, environment variables and argument passed to process. STDOUT and STDERR are sent as individual messages. RC port is sent a message on closure. Takes in messages that starts a process with ability to add environment values. Message can be sent to kill the process.
Test example:
Run the following command in the root directory of your Node-RED install
npm install node-red-contrib-prib-functions
Test/example flow in test/generalTest.json
0.23.0 Removes bug in test, more translation
0.22.0 Add autocovariance + autocorealationship to real time data analystics, improves test
0.21.0 Add lag/seasonal to real time data analystics
0.20.3 Add difference + monitor system
0.19.0 Improve load injector, fix bug in test comparing buffers, add compression tranforms
0.18.0 Add matrix node
0.17.0 Add finished wire to load injector
FAQs
Node-RED added node functions.
The npm package node-red-contrib-prib-functions receives a total of 136 weekly downloads. As such, node-red-contrib-prib-functions popularity was classified as not popular.
We found that node-red-contrib-prib-functions demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
Socket researchers discovered nine malicious NuGet packages that use time-delayed payloads to crash applications and corrupt industrial control systems.

Security News
Socket CTO Ahmad Nassri discusses why supply chain attacks now target developer machines and what AI means for the future of enterprise security.

Security News
Learn the essential steps every developer should take to stay secure on npm and reduce exposure to supply chain attacks.