Research
Security News
Kill Switch Hidden in npm Packages Typosquatting Chalk and Chokidar
Socket researchers found several malicious npm packages typosquatting Chalk and Chokidar, targeting Node.js developers with kill switches and data theft.
oop-timers
Advanced tools
oop-timers
are OOP timers (timeout and interval) for JavaScript. If you need to clear timeouts a lot and don't want
keep track of timers id and passing them to clearTimeout - this library is for you.
I bet you probably have written such class few times already, copying and pasting it over various projects or rewriting each time. As no one published such code yet - I just did, so you don't have to.
Documentation can be found here: oop-timers documentation. Jump directly to usage description: oop-timers usage.
npm install oop-timers
MIT
FAQs
This library wraps JavaScript timers (timeout and interval) in a class to provide OOP way of using them.
The npm package oop-timers receives a total of 112 weekly downloads. As such, oop-timers popularity was classified as not popular.
We found that oop-timers demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers found several malicious npm packages typosquatting Chalk and Chokidar, targeting Node.js developers with kill switches and data theft.
Security News
pnpm 10 blocks lifecycle scripts by default to improve security, addressing supply chain attack risks but sparking debate over compatibility and workflow changes.
Product
Socket now supports uv.lock files to ensure consistent, secure dependency resolution for Python projects and enhance supply chain security.