Research
Security News
Threat Actor Exposes Playbook for Exploiting npm to Build Blockchain-Powered Botnets
A threat actor's playbook for exploiting the npm ecosystem was exposed on the dark web, detailing how to build a blockchain-powered botnet.
rfc6920-toolbox
Advanced tools
Encode/decode RFC6920 "named information" URI's.
npm install rfc6920-toolbox
digest(algorithm, data) = rfc6920DigestString
Create a base64uri encoded digest of data
, using algorithm
serialize(niData) = niUriString
Create a ni-URI string from a niData
object
deserialize(uri) = niDataObject
Create a niData
object from a ni-URI string
var rfc6920 = require("rfc6920-toolbox");
var sourceCode = get_file_contents("https://code.jquery.com/jquery-1.10.2.min.js");
var digest = rfc6920.digest("sha-256", sourceCode);
//=> "C6CB9UYIS9UJeqinPHWTHVqh_E1uhG5Twh-Y5qFQmYg"
var niData = {
algorithm: "sha-256",
digest: digest,
parameters: {
"ct": "text/javascript"
}
}
var niUri = rfc6920.encode(niData);
//=> "ni:///sha-256;C6CB9UYIS9UJeqinPHWTHVqh_E1uhG5Twh-Y5qFQmYg?ct=text/javascript"
rfc6920.deserialize(niUri);
//=> niData
Note: this module supports currying.
var sha256Digest = rfc6920.digest("sha-256");
sha256Digest(sourceCode);
//=> "C6CB9UYIS9UJeqinPHWTHVqh_E1uhG5Twh-Y5qFQmYg"
defaults = {
algorithm: "sha-256",
authority: "",
digest: undefined, // Required
parameters: {}
}
Key: type name = default
string algorithm = "sha-256" RFC6920 Digest Algorithm
Digest Algorithm: The name of the digest algorithm, as specified in the IANA registry defined in Section 9.4.
string authority = ""
RFC6920 Authority value
Authority: The optional authority component may assist applications in accessing the object named by an ni-URI. There is no default value for the authority field. (See Section 3.2.2 of [RFC3986] for details.) While ni names with and without an authority differ syntactically from ni names with different authorities, all three refer to the same object if and only if the digest algorithm, length, and value are the same.
string digest = undefined
RFC6920 Digest Value
Digest Value: The digest value MUST be encoded using the base64url [RFC4648] encoding, with no "=" padding characters.
object parameters = {}
Deserialized RFC6920 Query Parameters, in key: value
format.
FAQs
Encode/decode RFC6920 "named information" URIs
We found that rfc6920-toolbox demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
A threat actor's playbook for exploiting the npm ecosystem was exposed on the dark web, detailing how to build a blockchain-powered botnet.
Security News
NVD’s backlog surpasses 20,000 CVEs as analysis slows and NIST announces new system updates to address ongoing delays.
Security News
Research
A malicious npm package disguised as a WhatsApp client is exploiting authentication flows with a remote kill switch to exfiltrate data and destroy files.