
Research
Malicious fezbox npm Package Steals Browser Passwords from Cookies via Innovative QR Code Steganographic Technique
A malicious package uses a QR code as steganography in an innovative technique.
normalize an object/array where some values might be boxed within a promise
With component
$ component install jkroso/when-all
With npm
$ npm install --save when-all
then in your app:
var all = require('when-all')
Create a Promsie for a new x
with all values lifted out of their promise proxies
all([
getPage('google.com'),
getPage('google.co.nz')
]).then(compare)
all({
usa: getPage('google.com'),
nz: getPage('google.co.nz')
}).then(compare)
The functions this module uses to handle objects and arrays are actually implemented differently and you can also access the specific handlers with require('when-all/{type}')
. I recommend you do this whenever possible to avoid unnecessary duck typing.
You could decorate a function so it can optionally take promised values as arguments.
var all = require('when-all/array')
function decorate(fn) {
return function(){
var self = this
return all(arguments).then(function(args){
return fn.apply(self, args)
})
}
}
var asyncCompare = decorate(compare)
asyncCompare(
getPage('google.com'),
getPage('google.co.nz')
)
$ npm install
$ make
Then open your browser to the ./test
directory.
Note: these commands don't work on windows.
FAQs
normalize an object/array where some values may be wrapped in Results
We found that when-all demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
A malicious package uses a QR code as steganography in an innovative technique.
Research
/Security News
Socket identified 80 fake candidates targeting engineering roles, including suspected North Korean operators, exposing the new reality of hiring as a security function.
Application Security
/Research
/Security News
Socket detected multiple compromised CrowdStrike npm packages, continuing the "Shai-Hulud" supply chain attack that has now impacted nearly 500 packages.