Research
Security News
Quasar RAT Disguised as an npm Package for Detecting Vulnerabilities in Ethereum Smart Contracts
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
A mix of async’s queue
and cargo
, with capacity optimization.
Structure | Tasks per worker (capacity) | Workers per structure (concurrency) |
---|---|---|
queue | 1 | x |
cargo | y | 1 |
quargo | y | x |
var queue = async.queue(worker, concurrency);
var cargo = async.cargo(function(tasks, callback) {
queue.push(tasks);
callback();
}, capacity);
cargo.push('a task')
Creates a quargo
object with the specified capacity
, concurrency
and delay
. Tasks added to the quargo
will be processed altogether (up to the capacity
limit) in parallel batches (up to the concurrency
limit). If all workers are in progress, the task is queued until one becomes available. If the quargo
hasn’t reached capacity
, the task is queued for maximum delay
. Once a worker has completed some tasks, each callback of those tasks is called.
Quargo passes an array of tasks to one of a group of workers, repeating when the worker is finished.
worker(tasks, callback)
- An asynchronous function for processing an array of queued tasks, which must call its callback(err)
argument when finished, with an optional err
argument.capacity
- An optional integer for determining how many tasks should be processed per round; if omitted, the default is unlimited.concurrency
- An optional integer for determining how many worker functions should be run in parallel; if omitted, the default is 1
.delay
- An optional integer for determining how long should the quargo
wait to reach capacity
; if omitted, the default is 0
.The quargo
object returned has the following properties and methods:
length()
- a function returning the number of items waiting to be processed.FAQs
A cargo with queue-like parallel processing and capacity optimization.
The npm package quargo receives a total of 0 weekly downloads. As such, quargo popularity was classified as not popular.
We found that quargo demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
Security News
Research
A supply chain attack on Rspack's npm packages injected cryptomining malware, potentially impacting thousands of developers.
Research
Security News
Socket researchers discovered a malware campaign on npm delivering the Skuld infostealer via typosquatted packages, exposing sensitive data.