Research
Security News
Quasar RAT Disguised as an npm Package for Detecting Vulnerabilities in Ethereum Smart Contracts
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
seek-bzip
The seek-bzip npm package is a pure-Javascript implementation of the BZIP2 decompression algorithm, which allows for random access seeking within bzip2 files. This package is particularly useful for applications that need to extract portions of large compressed files without having to decompress the entire file.
Random Access Decompression
This feature allows users to decompress a specific block of data from a bzip2 compressed file, starting at a specified byte. This is useful for extracting data from large files without the need to decompress the entire file.
const fs = require('fs');
const seekBzip = require('seek-bzip');
const compressedData = fs.readFileSync('path/to/compressed-file.bz2');
const start = 12345; // start byte for decompression
const decompressedData = seekBzip.decodeBlock(compressedData, start);
unbzip2-stream is a streaming bzip2 decompressor in pure JavaScript for Node.js. Unlike seek-bzip, it does not support random access seeking, but it is useful for streaming decompression of bzip2 files.
compressjs is a collection of pure JavaScript implementations of various data compression algorithms, including bzip2. It provides a broader range of compression algorithms compared to seek-bzip, but it may not support random access seeking within bzip2 files.
node-bzip is a bzip2 compression and decompression library for Node.js. It is a wrapper around the C++ libbz2 library, which means it is not pure JavaScript like seek-bzip. It offers fast performance but does not support random access seeking.
FAQs
a pure-JavaScript Node.JS module for random-access decoding bzip2 data
The npm package seek-bzip receives a total of 3,011,897 weekly downloads. As such, seek-bzip popularity was classified as popular.
We found that seek-bzip demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
Security News
Research
A supply chain attack on Rspack's npm packages injected cryptomining malware, potentially impacting thousands of developers.
Research
Security News
Socket researchers discovered a malware campaign on npm delivering the Skuld infostealer via typosquatted packages, exposing sensitive data.