
Research
Two Malicious Rust Crates Impersonate Popular Logger to Steal Wallet Keys
Socket uncovers malicious Rust crates impersonating fast_log to steal Solana and Ethereum wallet keys from source code.
xshell is a shell designed to provide a brand new human-computer interaction experience.

Install the latest version of NodeJS https://nodejs.org/en/
Enter a project directory that has a package.json file.
cd example/
or create a new project
mkdir example/
cd example/
npm init -y
xshell and you will get a xshell commandnpm install xshell
xshell to start the shell at http://127.0.0.1:8421npx xshell
# or call xshell directly
node ./node_modules/.bin/xshell
# or add `"xshell": "xshell",` in package.json scripts field, and
npm run xshell
shenhongfei.xshellcode --install-extension shenhongfei.xshell
xshell in vscode extension sidebar and click installimport { request } from 'xshell'
// start REPL
await request('https://shenhongfei.com')
// select the above line and press Ctrl + Enter, then you can inspect the result in xshell.
Change "main" field in package.json to extension.js before release extension.
FAQs
xshell is a shell designed to provide a brand new human-computer interaction experience.
The npm package xshell receives a total of 1,485 weekly downloads. As such, xshell popularity was classified as popular.
We found that xshell demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
Socket uncovers malicious Rust crates impersonating fast_log to steal Solana and Ethereum wallet keys from source code.

Research
A malicious package uses a QR code as steganography in an innovative technique.

Research
/Security News
Socket identified 80 fake candidates targeting engineering roles, including suspected North Korean operators, exposing the new reality of hiring as a security function.