
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

This is a reimplementation in TypeScript of the original r2pipe and r2pipe-promise modules for NodeJS.
If you are using r2skel (r2pm -ci r2skel) you can get a hello world to use this module with the following line:
r2pm -r r2skel r2-script-r2pipe-ts hello-ts
make -C hello-ts
The basic fundamentals of r2pipe is that you the API provides the most basic communication channel with r2, this is a single function called cmd that takes the command to be executed and returns the output of the command as a string.
As long as many commands in r2 return JSON, it is ideal for working with TS/JS, because using cmdj() the API will convert the output into an object.
In order to provide compatibility with all kind of backends, the whole api has been made asynchronous, this allows the developer to change the backend by only changing one line.
Note that stderr events are not handled by this API, process stdin/stdout is also not handled by r2pipe, but there are ways to manage it if needed.
--insecure-http-parser flag)r2 -i too.ts or > . too.tsradare2 also supports the esm modules generated by frida-compile. But it is worth to mention that r2frida comes with a C reimplementation of frida-compile (python). Which ships a typescript compiler and is able to pack multiple ts/js files into a single file.
This module is suposed to run with NodeJS, under some circunstancies, it may also with with r2js, bun or deno.
--pancake <@nopcode.org>
FAQs
TypeScript r2pipe API
The npm package r2pipe-ts receives a total of 2 weekly downloads. As such, r2pipe-ts popularity was classified as not popular.
We found that r2pipe-ts demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.