
Research
/Security News
Critical Vulnerability in NestJS Devtools: Localhost RCE via Sandbox Escape
A flawed sandbox in @nestjs/devtools-integration lets attackers run code on your machine via CSRF, leading to full Remote Code Execution (RCE).
Edits and updates Islands of Insight save game files to make your offline experience more fun.
A tool to make your gameplay experience more enjoyable!
Modify an Islands of Insight .sav file as described below. The tool prints out some gameplay statistics even if no modifications are requested.
pip install ioihelper
# installs jsonpath_ng, pygvas and pydantic as requirements
# Close the game, use this utility as described below, then restart.
> ioihelper -h
usage: ioihelper [-h]
[--sb, --set_sparks_balance SET_SPARKS_BALANCE]
[--sv, --show_completed_visuals SHOW_COMPLETED_VISUALS]
[--complete_all_dailies]
[--bk, --backup_old_and_use_new]
[--if, --input_file INPUT_FILE]
[--hf, --hints_file HINTS_FILE]
[--sj, --save_json]
Modify an Islands of Insight .sav file (OfflineSavegame.sav) as requested. Will
prints out some gameplay statistics if no modifications are requested.
options:
-h, --help
Show this help message and exit
--set_sparks_balance, --sb SET_SPARKS_BALANCE
Sets the Sparks (currency) in your account for purchasing cosmetics.
The ones you don't get through mainline and zone progression.
--show_completed_visuals, --sv SHOW_COMPLETED_VISUALS
Permanently enable/disable visuals cues for puzzle completion.
Persists beyond the current play session.
--complete_all_dailies
Mark ALL dailies completed. This will grant all the progression
cosmetics, but the game will be less fun to play. It does NOT affect
the meta puzzles or enclaves.
--backup_old_and_use_new, --bk
Without this flag your edits will not go into effect. This backs up the
original file by giving it a timestamp and renames the modified file so
it will be loaded by Islands of Insight.
--input_file, --if INPUT_FILE
Path to the Islands of Insight save file. If not present, looks for
your save file installation.
--hints_file, --hf HINTS_FILE
Path to optional deserialization hints (JSON) file. AFAIK, Islands
doesn't need one. See the pygvas documentation for more information.
--save_json, --sj
Save JSON save game files for both before and after modifications.
These will land next to the indicated save game source file.
When the awsome puzzle game Islands of Insight went offline, the team converted the game for offline play. That conversion required storing game progress locally. The team likely also wanted to improve re-playability, so they changed some things to focus on that experience.
One change I didn't prefer was that completed puzzles were no longer persistently visually marked for completion. Restarting the game would reset those visual markers, making it difficult to remember which puzzles would count toward zone-by-zone or puzzle-type progress. You can still earn Sparks, but progression didn't increment when re-completing the same puzzle.
I decided to take matters into my own hands and figured out how to do the edits described in the command line directions.
FAQs
Edits and updates Islands of Insight save game files to make your offline experience more fun.
We found that ioihelper demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
/Security News
A flawed sandbox in @nestjs/devtools-integration lets attackers run code on your machine via CSRF, leading to full Remote Code Execution (RCE).
Product
Customize license detection with Socket’s new license overlays: gain control, reduce noise, and handle edge cases with precision.
Product
Socket now supports Rust and Cargo, offering package search for all users and experimental SBOM generation for enterprise projects.