
Research
Security News
Malicious npm Packages Target BSC and Ethereum to Drain Crypto Wallets
Socket uncovered four malicious npm packages that exfiltrate up to 85% of a victim’s Ethereum or BSC wallet using obfuscated JavaScript.
It is an asynchronous wrapper around libcurl which is built to interface with the Uvloop python library.
The gateway into Acurl is through the CurlWrapper (discussed in Architectural Notes) and requires an event loop being passed to its constructor. Below is the mite implementation of acurl:
class SessionPool:
...
def __init__(self):
import acurl
self._wrapper = acurl.CurlWrapper(asyncio.get_event_loop())
...
Acurl uses a single loop maintained within python using UVloop.
Acurl surfaces the CurlWrapper interface which takes the asyncio event loop as an argument. The wrapper deals directly with the curl_multi interface from libcurl, defining 2 functions (curl_perform_write
and curl_perform_read
) for checking both read and write availability of file descriptors.
There are 2 notable functions within the core Acurl implementation, notably handle_socket
and start_timer
:
handle_socket
is passed as a callback function to the curl_multi interface and upon calls to the curl_multi_socket_action
function, will receive updates regarding the socket status. We then handle those statuses by either adding or removing the aforementioned readers or writers.start_timer
is another callback function that is passed to the curl_multi interface and is used as a way to handle timeouts and retries within curl. Upon a timeout, the timeout callback will be called and the transfer can be retried.FAQs
An async Curl library.
We found that acurl demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 3 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket uncovered four malicious npm packages that exfiltrate up to 85% of a victim’s Ethereum or BSC wallet using obfuscated JavaScript.
Security News
TC39 advances 9 JavaScript proposals, including Array.fromAsync, Error.isError, and Explicit Resource Management, which are now headed into the ECMAScript spec.
Security News
Vite releases Rolldown-Vite, a Rust-based bundler preview offering faster builds and lower memory usage as a drop-in replacement for Vite.