
Research
Malicious npm Packages Impersonate Flashbots SDKs, Targeting Ethereum Wallet Credentials
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
socket.io-client-xcontrol
Advanced tools
A Controller for the socket.io client
The goal of this package is to connect a websocket to a controller. Whenever specific actions are caused on a controller instance, messages should be emited through the socket.
The SocketIo
function takes a socket and returns a function that takes controllers and action names.
This HOC recieves and emits side effects through the socket.
The HOC listens for these actions on the socket, and triggers them on the controller when they are recieved.
It also listens for these actions on the controller, and emits them through the socket.
import SocketIo from 'socket.io-client-xcontrol'
SocketIo( socket )({ controller }, ['create', 'delete', 'update'])
The SocketIo
function takes a Controller class and method names, and returns a new class to be initialized with a socket.
This HOC overides the named methods and emits the method name, arguments and controller name through the socket.
When initialized, the HOC listens for these actions on the socket, and triggers them on the controller when they are recieved.
It also listens for these actions on the controller, and emits them through the socket.
import SocketIo from 'socket.io-client-xcontrol'
const ConnectedTodos = SocketIo( Todos , ['create', 'delete', 'update'])
const todos = new ConnectedTodos(socket)
Equivalent to:
class Todos extends HashMap {
constructor(initialState, socket){
super(initialState)
this.socket = socket
socket.on('@@todos__create', args => this.create(args))
}
create(...args){
super.create(...args)
this.socket.emit('@@todos__create', args)
}
}
FAQs
A Controller for the socket.io client
We found that socket.io-client-xcontrol demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
Security News
Ruby maintainers from Bundler and rbenv teams are building rv to bring Python uv's speed and unified tooling approach to Ruby development.
Security News
Following last week’s supply chain attack, Nx published findings on the GitHub Actions exploit and moved npm publishing to Trusted Publishers.