Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
A simple cross-platform string manipulation utility
We’re aiming to build a string library available for as many languages as possible, with as similar functionality as possible for all platforms.
Stringine’s functionality ranges from light functions (such as string capitalization and reversing) to more advanced functions (such as translating strings with character maps). The reason why we have lighter features that a developer could implement themselves is being all-in-one: a developer only has to use Stringine and no other modules or implementations to achieve even the simplest functionality in their application!
A developer can also easily move the exact same line of code to another language and achieve the same result: that’s what Stringine is all about.
Stringine is currently under development and there’s still a lot to be done! If you want to help, you are welcome to contribute.
FAQs
A simple cross-platform string manipulation utility.
We found that stringine demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.