
Research
Malicious npm Packages Impersonate Flashbots SDKs, Targeting Ethereum Wallet Credentials
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
NFX Erlang Package NFX UNISTACK includes: Application Container + Dependency Injection facilities Configuration engine BigMemory: Local/Distributed piles/heaps, ability to store hundreds of millions of objects resident in memory for long times without killing GC BigMemory Cache - store hudreds of millions of objects in RAM without GC pressure (full GC scan <20ms @ 300M+ objects 64 Gb taken) Logging with 8+ destinations/sinks(text, email, flood filter etc.) Distributed contact-oriented communication framework NFX.Glue (replaces WCF) Security with users, credentials, roles, permissions JSON parsing, ser/deser support Ultra efficient Binary serialization support Erlang CLR support with native types: tuples, lists, pattern matching Text lexing/parsing and processing pipeline: C# lexer, JSON lexer/Parser RelationalSchema language compiler - generate DDL for different targets Templatization engine (for web, emails and not only textual content) NFX.WAVE - Web Server with hybrid injectable threading model (replaces IIS + ASP.NET) NFX.WAVE.Mvc - MVC framework for web pages WV.js - a web component library auto-bindable to server MVC/MVVM Database access layer with virtual commands/queries/transactions ID generation - GlobalDistributed IDS (GDID), FID - fast process-wide ID Virtual Social Network - Twitter/Facebook/Google+ et al Virtual Payment Processing - Stripe,PayPal providers Virtual File Systems - AmazonS3, SVN, Local QR Code Creation In progress: Virtual document model with rendering to PDF, HTML and other formats In Progress: PDF DOM model + rendering
Supply Chain Security
Vulnerability
Quality
Maintenance
License
Uses eval
Supply chain riskPackage uses dynamic code execution (e.g., eval()), which is a dangerous practice. This can prevent the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.
Found 1 instance in 1 package
Unpopular package
QualityThis package is not very popular.
Found 1 instance in 1 package
Network access
Supply chain riskThis module accesses the network.
Found 1 instance in 1 package
FAQs
NFX Erlang Package NFX UNISTACK includes: Application Container + Dependency Injection facilities Configuration engine BigMemory: Local/Distributed piles/heaps, ability to store hundreds of millions of objects resident in memory for long times without killing GC BigMemory Cache - store hudreds of millions of objects in RAM without GC pressure (full GC scan <20ms @ 300M+ objects 64 Gb taken) Logging with 8+ destinations/sinks(text, email, flood filter etc.) Distributed contact-oriented communication framework NFX.Glue (replaces WCF) Security with users, credentials, roles, permissions JSON parsing, ser/deser support Ultra efficient Binary serialization support Erlang CLR support with native types: tuples, lists, pattern matching Text lexing/parsing and processing pipeline: C# lexer, JSON lexer/Parser RelationalSchema language compiler - generate DDL for different targets Templatization engine (for web, emails and not only textual content) NFX.WAVE - Web Server with hybrid injectable threading model (replaces IIS + ASP.NET) NFX.WAVE.Mvc - MVC framework for web pages WV.js - a web component library auto-bindable to server MVC/MVVM Database access layer with virtual commands/queries/transactions ID generation - GlobalDistributed IDS (GDID), FID - fast process-wide ID Virtual Social Network - Twitter/Facebook/Google+ et al Virtual Payment Processing - Stripe,PayPal providers Virtual File Systems - AmazonS3, SVN, Local QR Code Creation In progress: Virtual document model with rendering to PDF, HTML and other formats In Progress: PDF DOM model + rendering
We found that nfx.erlang demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
Security News
Ruby maintainers from Bundler and rbenv teams are building rv to bring Python uv's speed and unified tooling approach to Ruby development.
Security News
Following last week’s supply chain attack, Nx published findings on the GitHub Actions exploit and moved npm publishing to Trusted Publishers.