
Research
Malicious fezbox npm Package Steals Browser Passwords from Cookies via Innovative QR Code Steganographic Technique
A malicious package uses a QR code as steganography in an innovative technique.
simple_and_fast_add
Advanced tools
very simple and fast way to sum numbers (int and float or float float etc)
Its awesome module. So simple, and so fast
npm i simple_and_fast_add
and import class Sum from this package
const Sum = require('simple_and_fast_add');
const Sum = require('simple_and_fast_add');
//use async. its very important
(async () => {
const Adder = new Sum();
await Adder.getValuesStorage()
//add first value to storage
.addValue(new Sum.Number(5))
.then(indx => {
Adder.lastIndex = indx.last;
Adder.preLastIndex = indx.preLast;
})
.catch(error => new Sum.Error(error));
await Adder.getValuesStorage()
//add second value to storage
.addValue(new Sum.Float(3.14))
.then(indx => {
Adder.lastIndex = indx.last;
Adder.preLastIndex = indx.preLast;
})
.catch(error => new Sum.Error(error))
//add just add it
const SumManager = new Sum.Manager();
SumManager.setAdder(Adder);
SumManager.trySum()
.then(s => console.dir(new Sum.Result(s).toString()))
//"5+3.14=8.14"
//Ya :) we get answer. So easy
.catch(error => {
// DEPRECATED TRICK
console.log(5 + 3.14)
});
})();
FAQs
very simple and fast way to sum numbers (int and float or float float etc)
The npm package simple_and_fast_add receives a total of 1 weekly downloads. As such, simple_and_fast_add popularity was classified as not popular.
We found that simple_and_fast_add demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
A malicious package uses a QR code as steganography in an innovative technique.
Research
/Security News
Socket identified 80 fake candidates targeting engineering roles, including suspected North Korean operators, exposing the new reality of hiring as a security function.
Application Security
/Research
/Security News
Socket detected multiple compromised CrowdStrike npm packages, continuing the "Shai-Hulud" supply chain attack that has now impacted nearly 500 packages.