
Research
PyPI Package Disguised as Instagram Growth Tool Harvests User Credentials
A deceptive PyPI package posing as an Instagram growth tool collects user credentials and sends them to third-party bot services.
unix-dgram-socket
Advanced tools
Unix datagram socket with abstract namespace support for local interprocess communication.
Connection-less, reliable unix datagram socket implementation with abstract namespace support for local interprocess communication in Node.JS application. UNIX domain sockets can be either unnamed, or bound to a filesystem pathname (marked as being of type socket). Linux also supports an abstract namespace which is independent of the filesystem.
npm i unix-dgram-socket --save
Package C++ addons will be compiled during installation.
import {UnixDgramSocket} from "unix-dgram-socket";
const socket = new UnixDgramSocket();
// Call on error
socket.on('error', (error: any) => {
console.log(error);
});
// Call when new message is received
socket.on('message', (message: Buffer, info: any) => {
console.log(message.toString(UnixDgramSocket.payloadEncoding));
console.log(info);
});
// Call when socket is bind to path
socket.on('listening', (path: string) => {
console.log(`socket listening on path: ${path}`);
});
// Bind socket to filesystem path
socket.bind("/tmp/socket1.sock");
import {UnixDgramSocket} from "unix-dgram-socket";
const socket = new UnixDgramSocket();
// Call on error
socket.on('error', (error: any) => {
console.log(error);
});
// Call when new message is received
socket.on('message', (message: Buffer, info: any) => {
console.log(message.toString(UnixDgramSocket.payloadEncoding));
console.log(info);
});
// Call on successful connect
socket.on('connect', (path: string) => {
console.log(`socket connected to path: ${path}`);
});
// Call when socket is bind to path
socket.on('listening', (path: string) => {
console.log(`socket listening on path: ${path}`);
});
socket.send("Special inter-process delivery!", "/tmp/socket1.sock");
// Dgram socket is connection-less so call connect only set default destination path and can be called many times
socket.connect("/tmp/socket1.sock");
// Send can be called without path if 'connect' was called before
socket.send("I will be send to default path, set by connect!");
// CLose socket to prevent further communication
socket.close();
Abstract namespace path can be passed by starting path string from null byte ('\0') or "@" character.
// Bind socket to abstract path
socket.bind("@/abstract/path/socket1.sock");
// Send data to abstract namespace path
socket.send("Special inter-process delivery!", "@/abstract/path/socket1.sock");
Pull requests are welcome. For major changes, please open an issue first to discuss what you would like to change.
Please make sure to update tests as appropriate.
FAQs
Unix datagram socket with abstract namespace support for local interprocess communication.
The npm package unix-dgram-socket receives a total of 0 weekly downloads. As such, unix-dgram-socket popularity was classified as not popular.
We found that unix-dgram-socket demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
A deceptive PyPI package posing as an Instagram growth tool collects user credentials and sends them to third-party bot services.
Product
Socket now supports pylock.toml, enabling secure, reproducible Python builds with advanced scanning and full alignment with PEP 751's new standard.
Security News
Research
Socket uncovered two npm packages that register hidden HTTP endpoints to delete all files on command.