
Research
PyPI Package Disguised as Instagram Growth Tool Harvests User Credentials
A deceptive PyPI package posing as an Instagram growth tool collects user credentials and sends them to third-party bot services.
regex-parser
Advanced tools
A module that parses a string as regular expression and returns the parsed value.
The regex-parser npm package is a utility for parsing regular expressions from strings in JavaScript. It allows developers to dynamically create regular expression objects from string inputs, which can be useful in scenarios where regular expressions need to be constructed at runtime based on user input or other dynamic data sources.
Parsing regular expressions from strings
This feature allows the parsing of regular expressions from string format into RegExp objects. The example demonstrates creating a RegExp object for a case-insensitive match of the word 'hello' and testing it against a sample string.
const regexParser = require('regex-parser');
// Parse a regular expression from a string
const regex = regexParser('/hello/i');
// Use the parsed regex to test strings
console.log(regex.test('Hello world')); // true
The 'regex' package provides similar functionalities for handling regular expressions in JavaScript. It offers more comprehensive features for building, testing, and modifying regular expressions compared to regex-parser, which primarily focuses on parsing.
The 'safe-regex' package is designed to check if a regular expression is safe and not susceptible to ReDoS (Regular Expression Denial of Service) attacks. While it does not provide direct parsing capabilities like regex-parser, it complements its functionality by ensuring the safety of regex patterns.
A module that parses a string as regular expression and returns the parsed value.
# Using npm
npm install --save regex-parser
# Using yarn
yarn add regex-parser
// Dependencies
var RegexParser = require("regex-parser");
console.log(RegexParser("/^hi$/g"));
// => /^hi$/g
There are few ways to get help:
RegexParser(input)
Parses a string input.
input
: The string input that should be parsed as regular expression.Have an idea? Found a bug? See how to contribute.
I open-source almost everything I can, and I try to reply to everyone needing help using these projects. Obviously, this takes time. You can integrate and use these projects in your applications for free! You can even change the source code and redistribute (even resell it).
However, if you get some profit from this or just want to encourage me to continue creating stuff, there are few ways you can do it:
Starring and sharing the projects you like :rocket:
—I love books! I will remember you after years if you buy me one. :grin: :book:
—You can make one-time donations via PayPal. I'll probably buy a
coffee tea. :tea:
—Set up a recurring monthly donation and you will get interesting news about what I'm doing (things that I don't share with everyone).
Bitcoin—You can send me bitcoins at this address (or scanning the code below): 1P9BRsmazNQcuyTxEqveUsnf5CERdq35V6
Thanks! :heart:
FAQs
A module that parses a string as regular expression and returns the parsed value.
The npm package regex-parser receives a total of 8,128,075 weekly downloads. As such, regex-parser popularity was classified as popular.
We found that regex-parser demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
A deceptive PyPI package posing as an Instagram growth tool collects user credentials and sends them to third-party bot services.
Product
Socket now supports pylock.toml, enabling secure, reproducible Python builds with advanced scanning and full alignment with PEP 751's new standard.
Security News
Research
Socket uncovered two npm packages that register hidden HTTP endpoints to delete all files on command.