Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
A fast implementation of the so-called pluto99 theory in JavaScript.
A JavaScript library to get the heliocentric rectangular coordinates of dwarf planet Pluto according to the "pluto99" theory.
The JavaScript implementation is about 13.23 Kb (minified and gzipped).
The WebAssembly version is 26.17 Kb (minified and gzipped).
$ yarn add pluto99
In node:
const pluto99 = require('pluto99');
// Get an object with the (x,y,z) coordinates of Pluto.
const coords = pluto99(2451545);
In browsers, we recommend to load the script asynchronously:
import('pluto99').then((pluto99) => {
// Get an object with the (x,y,z) coordinates of Pluto.
const coords = pluto99(2451545);
});
In browsers:
import pluto99Loader from 'pluto99/dist/pluto99-wasm';
pluto99Loader.then((pluto99) => {
// Get an object with the (x,y,z) coordinates of Pluto.
const coords = pluto99(2451545);
});
According to the doc:
The theory is valid between the years -2997 and 2983. (60 centuries approximately).
The largest discrepancy obtained by a comparison with the source DE406 is 0.00005 ua.
The largest discrepancies obtained in a comparison with the elements deduced from DE406 are:
- a : 0.080 au (semi-major axis)
- l : 0.2 degree (mean longitude)
- h,k : 0.0022 degree
- p,q : 0.0003 degree
$ yarn build
Install emscripten, then:
$ ./build && yarn build
Make sure to run the build script first, then:
$ yarn test
With regards to the original terms, the following changes have been applied:
The theory full name is "Pluto's tables from -2997 to 2983" and was published in March 1999.
Although, unlike VSOP, it does not have an official short name, it is popularly called "pluto99".
FAQs
A fast implementation of the so-called pluto99 theory in JavaScript.
The npm package pluto99 receives a total of 1 weekly downloads. As such, pluto99 popularity was classified as not popular.
We found that pluto99 demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.