Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Download an array of objects as a CSV file in the browser
save-csv
is a tiny library (892 bytes gzipped) that creates an CSV file from a array of objects with matching keys and triggers a download in the browser. Features:
,
) based on the user's regional settings.<script src="save-csv.min.js"></script>
saveCsv([
{a:1, b:2},
{a:3, b:4},
]);
a,b
1,2
3,4
array
Array: An array containing objects with matching keys.options
Object
filename
string: The filename to save to. Default: export.csv
.sep
string: The value separator (usually ,
). Recognizes the special value auto
with which automatic detection based on the user's regional settings is attempted (See #1). Default: auto
.eol
string: The line separator. Default: \r\n
.quote
string: The quote character to use. Default: "
.bom
boolean: Whether to include a byte order mark in the output. Default: true
.mime
string: The mime type for the file. Default: text/csv;charset=utf-8
.formatter
Function: A custom formatter function for values. The default function handles sep
in values and uses JSON.stringify for complex values. Receives
value`.© silverwind, distributed under BSD licence
FAQs
Download an array of objects as a CSV file in the browser
The npm package save-csv receives a total of 619 weekly downloads. As such, save-csv popularity was classified as not popular.
We found that save-csv demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.