Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Plays your code, slowly. Useful for recording software demos or closely watching Selenium user interface tests run.
Can slow jam JavaScript, CoffeeScript, and Literate CoffeeScript.
Simple API. Load and play -- that's all you need to know!
Open source. (MIT License)
npm install slowjam
npm install -g slowjam
slowjam = require('slowjam')
jam = new slowjam.SlowJam()
jam.load('/path/to/slowjam-worthy-code.js')
jam.play()
slowjam = require('slowjam')
jam = new slowjam.SlowJam({'slowness':2000, 'log':true})
jam.load('/path/to/slowjam-worthy-code.js')
jam.play()
slowjam /path/to/slowjam-worthy-code.js
By default, a one second delay is added between each statement.
> jam.slowness = 1000 // 1000 milliseconds, or 1 second
You can speed up the jam by reducing the slowness.
> jam.slowness = 500 // 500 milliseconds, or 0.5 seconds
Or slow your jam way down...
> jam.slowness = 5000 // 5000 milliseconds, or 5 seconds
By default, slowjam does not log the statement about to be run to stdout.
> jam.log = false
But you can turn that on.
> jam.log = true
FAQs
Plays your code, slowly.
The npm package slowjam receives a total of 1 weekly downloads. As such, slowjam popularity was classified as not popular.
We found that slowjam demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.