Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Validate and parse Redis URI connection schemes
The URI connection scheme expects the following parameters:
redis://
: Required. A protocol prefix to indentifying this as URI connection format.auth@
: Optional. If specified, AUTH password used to connect to the redis database.host
: Required. A network location (e.g. hostname or IP address) of the redis server.:port
: Optional. The server port assigned to the redis process. Defaults to 6379
./database
: Optional. An available redis database number. Defaults to 0
.parse(uri)
Parse the passed uri
into an object containing four properties: auth
, host
, port
, db
. Note that if no AUTH password is provided, the auth
property is set to null
.
var redisuri = require('redisuri');
console.log(redisuri.validate('redis://localhost:6379'));
// => { auth: null, host: 'localhost', port: 6379, db: 0 }
console.log(redisuri.validate('redis://authstring@192.168.1.1:6379/7'));
// => { auth: authstring, host: '192.168.1.1', port: 6379, db: 7 }
validate(uri)
Ensures that the passed uri
contains the redis:
protocol and specifies a hostname. Throws a TypeError
if either condition fails. If successful, returns the passed uri for convienient chaining with redisURI.parse
.
var redisuri = require('redisuri');
var uri = 'redis://localhost:6379';
var bad = 'localhost';
console.log(redisuri.validate(uri));
// => 'redis://localhost:6379'
console.log(redisuri.validate(bad));
// => TypeError: A protocol must be specified in the Redis URI connection scheme (e.g. redis:)
npm test
PRs are welcome! For bugs, please include a failing test which passes when your PR is applied.
FAQs
Validate and parse Redis URI connection schemes
The npm package redisuri receives a total of 98 weekly downloads. As such, redisuri popularity was classified as not popular.
We found that redisuri demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.