
Research
Two Malicious Rust Crates Impersonate Popular Logger to Steal Wallet Keys
Socket uncovers malicious Rust crates impersonating fast_log to steal Solana and Ethereum wallet keys from source code.
udx-native-nodejs-mobile
Advanced tools
udx is reliable, multiplex, and congestion controlled streams over udp
udx is reliable, multiplex, and congestion controlled streams over udp.
It's written in C99 and depends on libuv.
It is pre-alpha wip (there be dragons), but at a stage where it's safe for developers to poke at.
The main purpose is to be a building block for P2P networking. It therefore doesn't come with any handshaking protocol, encryption, and things like that - just reliable, fast, streams.
TODO
npm install udx-native
Two build setups are available: A GYP build and a CMake build.
The GYP build is used for building a dynamic library for use in Node.js.
node-gyp configure
node-gyp build
The above commands are run as part of npm install
.
The CMake build is used for building static and dynamic libraries for use outside of Node.js.
cmake -S . -B build
cmake --build build
When debugging native code, make sure to configure a debug build:
# GYP
node-gyp configure --debug
# CMake
cmake -S . -B build -D CMAKE_BUILD_TYPE=Debug
To diagnose and debug memory errors, such as leaks and use-after-free, the collection of sanitizers provided by LLVM are recommended. The sanitizers can be enabled by passing additional CFLAGS
and/or LDFLAGS
to the CMake or GYP build:
# GYP
CFLAGS=<...> LDFLAGS=<...> node-gyp build
# CMake
CFLAGS=<...> LDFLAGS=<...> cmake -S . -B build
To read more about the various sanitizers and how to use them, see:
:warning: LeakSanitizer is still experimental and currently requires a newer version of LLVM on macOS. If using Homebrew,
brew install llvm
andCC=/usr/local/opt/llvm/bin/clang
should be sufficient.
MIT
FAQs
udx is reliable, multiplex, and congestion controlled streams over udp
We found that udx-native-nodejs-mobile demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Socket uncovers malicious Rust crates impersonating fast_log to steal Solana and Ethereum wallet keys from source code.
Research
A malicious package uses a QR code as steganography in an innovative technique.
Research
/Security News
Socket identified 80 fake candidates targeting engineering roles, including suspected North Korean operators, exposing the new reality of hiring as a security function.