
Research
NPM targeted by malware campaign mimicking familiar library names
Socket uncovered npm malware campaign mimicking popular Node.js libraries and packages from other ecosystems; packages steal data and execute remote code.
meshreferencelibrarywindows
Advanced tools
The Mesh is a Threshold Key Infrastructure that makes the Internet easier to use by making it more secure.
Bad security design doesn't just create insecurity, it causes endless user headaches. Traditional Internet security applications are hard to use because little to no thought was given to usability in their design.
Carl Ellison's law states that the user base for any application is halved for every mouse click or keystroke that is required of them. My personal experience suggest that this likely understates the problem.
The Mesh is designed to provide users with the highest level of security that is possible without asking them to do anything at all. For this to become possible, the Mesh will have to be shipped to users as part of the machine Operating System.
The Reference Library is an Open Source (MIT License) library implementing the Mesh protocols and encodings. It is also the source from which the reference sections of the Mesh specifications are generated and the code used to generate all the examples.
The reference library has three main goals:
To serve as a vehicle for documenting and developing the Mesh specifications.
To be used in applications to enable use of Mesh capabilities
To serve as a benchmark against which the standards compliance of other implementations may be tested.
meshman is a shell tool that exposes most Mesh functionality in a form that is compatible with most scripting environments.
Detailed documentation of meshman is given in the User Guide and Reference Manual:
These badges would be so much more impressive if I could work out how to make them report my code coverage rather than someone else's.
FAQs
Unknown package
We found that meshreferencelibrarywindows demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Socket uncovered npm malware campaign mimicking popular Node.js libraries and packages from other ecosystems; packages steal data and execute remote code.
Research
Socket's research uncovers three dangerous Go modules that contain obfuscated disk-wiping malware, threatening complete data loss.
Research
Socket uncovers malicious packages on PyPI using Gmail's SMTP protocol for command and control (C2) to exfiltrate data and execute commands.