
Security News
/Research
Wallet-Draining npm Package Impersonates Nodemailer to Hijack Crypto Transactions
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
worker-man
is a lightweight and easy-to-use package for distributing CPU-intensive operations in Node.js.
This package let's you convert a CPU heavy functions into an async functions, which will run in a worker thread on invocation, it's that simple
# If you use npm:
npm install worker-man
# Or if you use Yarn:
yarn add worker-man
Use the button below to play with a small demo project to help familiarize with Worker Man.
Here's a basic example of how to use worker-man
.
createWorker
with the __filename
as first argument and the function you have defined as the second argument.fibonacci-worker.js
import { createWorker } from 'worker-man';
// A CPU intensive fibonacci implementation
export function cpuHeavyFindFibonacci(n){
if (n < 2) return 1;
else return cpuHeavyFindFibonacci(n - 2) + cpuHeavyFindFibonacci(n - 1);
}
export const findFibonacci = createWorker(__filename, cpuHeavyFindFibonacci);
createWorker
, which will be an async
function that you can use anywhere in your codebase.main.js
import { findFibonacci } from './fibonacci-worker.ts'
const main = async () => {
const fibonacci = await findFibonacci(200); // Here `findFibonacci` will be run in a worker thread
console.log(fibonacci);
}
In the above example findFibonacci
will be run in a worker thread
Returns a function that can be used to execute the workerFunction in a separate thread.
A function that returns a Promise which resolves to the result of workerFunction.
Worker Man is MIT licensed.
FAQs
A better & simple API to consume worker thread in node.js
The npm package worker-man receives a total of 0 weekly downloads. As such, worker-man popularity was classified as not popular.
We found that worker-man demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
/Research
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
Security News
This episode explores the hard problem of reachability analysis, from static analysis limits to handling dynamic languages and massive dependency trees.
Security News
/Research
Malicious Nx npm versions stole secrets and wallet info using AI CLI tools; Socket’s AI scanner detected the supply chain attack and flagged the malware.