
Security News
/Research
Wallet-Draining npm Package Impersonates Nodemailer to Hijack Crypto Transactions
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
This node.js module is an implementation of the Volt Ontoloy and Linked-data Technology.
This module is for the low-level processing of SPARQL queries, compiling procedures to javascript, evaluating procedures in memory, etc. and compiling .volt
source files to their serialized .ttl
form.
If you simply want to connect VOLT to your local triple store and execute SPARQL queries over HTTP, go check out volt-demo.js which launches an HTTP proxy (via express) to interact with VOLT. The demo also ships as a webapp that includes a SPARQL interface for submitting queries directly to the VOLT proxy. Go check it out if you are interested in using VOLT as a proxy.
$ npm install volt
const volt = require('volt');
const postgis = require('volt-plugin-postgis');
// create volt instance
let volt_query = volt({
plugins: {
// load the postgis plugin, passing it a postgres connection string to a db
[postgis.namespace]: postgis.create({
connection: 'postgres://blake@localhost/volt',
}),
},
});
// issue sparql query
volt_query('ask {:A :b :C}', (h_sparql_results) => {
// ...
});
// use the library to compile .volt => .ttl
let h_compiled_procedures = volt.compile({
code: fs.readFileSync('source.volt'),
});
$ gulp develop
FAQs
VOLT Ontology and Linked-data Technology
The npm package volt receives a total of 12 weekly downloads. As such, volt popularity was classified as not popular.
We found that volt demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
/Research
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
Security News
This episode explores the hard problem of reachability analysis, from static analysis limits to handling dynamic languages and massive dependency trees.
Security News
/Research
Malicious Nx npm versions stole secrets and wallet info using AI CLI tools; Socket’s AI scanner detected the supply chain attack and flagged the malware.