
Research
Malicious fezbox npm Package Steals Browser Passwords from Cookies via Innovative QR Code Steganographic Technique
A malicious package uses a QR code as steganography in an innovative technique.
secure-flow
Advanced tools
Secure Flow is a lightweight TypeScript utility package for encryption and decryption using the AES-256-CBC algorithm. This package simplifies the process of securely encrypting and decrypting text, making it easy to integrate strong encryption into your
The secure-flow provides the functionality for encrypting and decrypting text using the Node.js crypto module, with configurations loaded from a specified source.
npm install -g secure-flow
# or
yarn global add secure-flow
A file named secureflow.config.ts or secureflow.config.cjs is created with the following content:
module.exports = {
encryptionAlgorithm: "aes-256-cbc",
encryptionKey: "your-32-character-encryption-key",
iv: Buffer.from("your-16-character-iv"),
};
And you can import the encrypt or decrypt methods:
import { encrypt, decrypt } from "secure-flow";
app.get("/encrypt", async (req, res) => {
const data = await JSON.stringify({ data: "Hello, World!" });
res.status(200).json(encrypt(data));
});
app.get("/decrypt", async (req, res) => {
const data = await req.body;
res.status(200).json(decrypt(data));
});
encryptionAlgorithm: The encryption algorithm used by SecureFlow. Default is 'aes-256-cbc'. encryptionKey: A 32-character string used as the encryption key. Replace 'your-32-character-encryption-key' with your actual encryption key. iv: Initialization Vector (IV) used for encryption. Should be a 16-character Buffer. Replace 'your-16-character-iv' with your actual IV.
This package is licensed under the MIT License.
Contributions are welcome! Feel free to open an issue or submit a pull request.
If you find any issues with the package, please report them on the GitHub issues page.
Adarsh M
GitHub: [Profile](https://github.com/adarshm07/)
FAQs
Secure Flow is a lightweight TypeScript utility package for encryption and decryption using the AES-256-CBC algorithm. This package simplifies the process of securely encrypting and decrypting text, making it easy to integrate strong encryption into your
We found that secure-flow demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
A malicious package uses a QR code as steganography in an innovative technique.
Research
/Security News
Socket identified 80 fake candidates targeting engineering roles, including suspected North Korean operators, exposing the new reality of hiring as a security function.
Application Security
/Research
/Security News
Socket detected multiple compromised CrowdStrike npm packages, continuing the "Shai-Hulud" supply chain attack that has now impacted nearly 500 packages.