Research
Security News
Quasar RAT Disguised as an npm Package for Detecting Vulnerabilities in Ethereum Smart Contracts
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
It's a simple stubber.
For when you don't want to write the same thing over and over to cache a method and call an override, then revert it, and blah blah.
$ npm install --save-dev stubs
var mylib = require('./lib/index.js')
var stubs = require('stubs')
// make it a noop
stubs(mylib, 'create')
// stub it out
stubs(mylib, 'create', function() {
// calls this instead
})
// stub it out, but call the original first
stubs(mylib, 'create', { callthrough: true }, function() {
// call original method, then call this
})
// use the stub for a while, then revert
stubs(mylib, 'create', { calls: 3 }, function() {
// call this 3 times, then use the original method
})
Name of the method to stub.
false
Call the original method as well as the stub (if a stub is provided).
0
(never revert)Number of calls to allow the stub to receive until reverting to the original.
function() {}
This method is called in place of the original method. If opts.callthrough
is true
, this method is called after the original method is called as well.
FAQs
Easy method stubber.
We found that stubs demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
Security News
Research
A supply chain attack on Rspack's npm packages injected cryptomining malware, potentially impacting thousands of developers.
Research
Security News
Socket researchers discovered a malware campaign on npm delivering the Skuld infostealer via typosquatted packages, exposing sensitive data.