
Research
Shai-Hulud Descends to Hades: Miasma Worm Campaign Spreads with New PyPI Wave
Socket found 37 malicious PyPI wheels that abuse Python startup hooks to launch a Bun-powered credential stealer tied to Mini Shai-Hulud/Miasma.
nostr nodejs library
const {RelayPool} = require('nostr')
const jb55 = "32e1827635450ebb3c5a7d12c1f8e7b2b514439ac10a67eef3d9fd9c5c68e245"
const damus = "wss://relay.damus.io"
const scsi = "wss://nostr-pub.wellorder.net"
const relays = [damus, scsi]
const pool = RelayPool(relays)
pool.on('open', relay => {
relay.subscribe("subid", {limit: 2, kinds:[1], authors: [jb55]})
});
pool.on('eose', relay => {
relay.close()
});
pool.on('event', (relay, sub_id, ev) => {
console.log(ev)
});
Connect to a pool of relays. You should use this instead of Relay directly.
options: {reconnect: true|false}, defaults to {reconnect: true}
const relays = [`wss://relay1.com`, `wss://relay2.com`]
const pool = RelayPool(relays, {reconnect: false})
Connect to a relay
options: {reconnect: true|false}, defaults to {reconnect: true}
const relay = Relay(`wss://relay.damus.io`, {reconnect: false})
Calculate an id from an event
Create a signature for an id
Verify an event
Returns: true if valid signature, false otherwise
Decrypt a direct message
Returns: decrypted content
Encrypt a direct message
Returns: encrypted content
Get a public key from a privkey
Create a delegation. This gives publisherPubkey permission to create events
on the privkeys behalf subject to conditions
privkey: authorizer private key
publisherKey: delegate/publisher pubkey
conditions: & separated set of event creation permissions that the delegate
is required to adhere to when creating events
eg: created_at>1669303873&created_at<1674574279&kind=1,7
Returns:
{pubkey, publisherPubkey, conditions, token}
Where token is the delegation token, which is a signature from the authorizer
of the delegation nostr:delegation:publisher_key:.
Create a delegated event from a delegation. This is an event posted on behalf
of delegation.pubkey subject to delegation.conditions.
delegation: a delegation in the form returned by createDelegation
publisherPrivkey: the private key of the delegate, the entity posting on behalf of delegation.pubkey
event: The event to post as a delegate. The event pubkey will be overridden
by the publisherPubkey. The delegation tag will be upserted into the tag
list.
Sign a delegation string in the form nostr:delegation:....
Returns: a signature string called the delegation token.
FAQs
nostr lib and cli
The npm package nostr receives a total of 478 weekly downloads. As such, nostr popularity was classified as not popular.
We found that nostr demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
Socket found 37 malicious PyPI wheels that abuse Python startup hooks to launch a Bun-powered credential stealer tied to Mini Shai-Hulud/Miasma.

Security News
RubyGems and Bundler 4.0.13 introduced an opt-in cooldown feature that delays newly published gems during dependency resolution.

Security News
pnpm 11.5 now recognizes npm staged publish approvals in release metadata, preventing those releases from being mistaken for lower-trust package publishes.