
Research
Security News
Lazarus Strikes npm Again with New Wave of Malicious Packages
The Socket Research Team has discovered six new malicious npm packages linked to North Korea’s Lazarus Group, designed to steal credentials and deploy backdoors.
then-busboy
Advanced tools
Promise-based wrapper around Busboy. Process multipart/form-data content and returns it as a single object.
Promise-based wrapper around Busboy. Process multipart/form-data content and returns it as a single object.
Note: The current documentation is for 2.x versions of then-busboy. If you're looking for a previous version, check out the 1.x branch.
Use can install then-busboy
from npm:
npm install --save then-busboy
Or with yarn:
yarn add then-busboy
busboy(request[, options]) -> Promise<Object>
constructor File(options)
contents
A file contents Readable stream.
stream
An alias for contents
filename
A full name of the file
basename
A name of the file without extension
extname
A file extension
mime
A file mime type
enc
File contents encoding
path
Default path of the file
read() => Promise<Buffer>
Read a file from contents stream.
write([path]) => Promise<void>
Write a file content to disk. Optionally you can set a custom path.
By default, file will be saved in system temporary directory os.tmpdir()
.
You can take this path from path property.
then-busboy can restore an object structure from form-data field names if you will follow the special naming format with bracket notation:
# Note that the following example is just a pseudo code
rootField[nestedField] = "I beat Twilight Sparkle and all I got was this lousy t-shirt"
then-busboy will return the this object for an example from above:
{
rootField: {
nestedField: "I beat Twilight Sparkle and all I got was this lousy t-shirt"
}
}
You can also send an arrays and collections using bracket format:
message[sender] = "John Doe"
message[text] = "Some whatever text message."
message[attachments][0][file] = <here is the file content>
message[attachments][0][description] = "Here is a description of the file"
then-busboy returns the following object:
{
message: {
sender: "John Doe",
text: "Some whatever text message.",
attachments: [
{
file: File, // this field will be represended as a File instance
description: "Here is a description of the file"
}
]
}
}
Note that there is no an implementation for array as root field for now!
Just import then-busboy
and pass request
object as first argument.
import busboy from "then-busboy"
import {createServer} from "http"
function handler(req, res) {
// Get result from then-busboy
function onFulfilled(data) {
res.writeHead("Content-Type", "application/json")
res.end(JSON.stringify(data))
}
// Handle errors
function onRejected(err) {
res.statusCode = err.status || 500
res.end(String(err))
}
// Call `then-busboy` with `req`
busboy(req).then(onFulfilled, onRejected)
}
createServer(handler)
.listen(2319, () => console.log("Server started on http://localhost:2319"))
then-busboy
always returns a Promise, so you can use it with
asynchronous function syntax:
// Some of your awesome code with async workflow...
const data = await busboy(req)
FAQs
Promise-based wrapper around Busboy. Processes multipart/form-data request body and returns it in a single object.
The npm package then-busboy receives a total of 52 weekly downloads. As such, then-busboy popularity was classified as not popular.
We found that then-busboy demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
The Socket Research Team has discovered six new malicious npm packages linked to North Korea’s Lazarus Group, designed to steal credentials and deploy backdoors.
Security News
Socket CEO Feross Aboukhadijeh discusses the open web, open source security, and how Socket tackles software supply chain attacks on The Pair Program podcast.
Security News
Opengrep continues building momentum with the alpha release of its Playground tool, demonstrating the project's rapid evolution just two months after its initial launch.