Security News
Research
Data Theft Repackaged: A Case Study in Malicious Wrapper Packages on npm
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
Ruby wrapper for google's cityhash.
gem install bitshares-cityhash
require 'cityhash'
text = "test"
seed1 = 12345
seed2 = 54321
CityHash.hash32(text) # => 1633095781
CityHash.hash64(text) # => 8581389452482819506
CityHash.hash64(text, seed1) # => 9154302171269876511
CityHash.hash64(text, seed1, seed2) # => 4854399283587686019
CityHash.hash128(text) # => 124124989950401219618153994964897029896
CityHash.hash128(text, seed1) # => 101668641288246442316643001405184598611
CityHash.hash128crc(text) # => 124124989950401219618153994964897029896
CityHash.hash128crc(text, seed1) # => 101668641288246442316643001405184598611
CityHash.hash256crc(text) # => 11964743055457135893972873789222488394617411264226841264756
CityHash does not maintain backward compatibility with previous versions. You should not use CityHash for persitent storage, or else never upgrade it.
If you need backward compatibility please consider other hash functions like xxHash or MurmurHash
Copyright (c) 2012 Vasiliy Ermolovich. See LICENSE.txt for further details.
FAQs
Unknown package
We found that bitshares-cityhash demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Research
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
Research
Security News
Attackers used a malicious npm package typosquatting a popular ESLint plugin to steal sensitive data, execute commands, and exploit developer systems.
Security News
The Ultralytics' PyPI Package was compromised four times in one weekend through GitHub Actions cache poisoning and failure to rotate previously compromised API tokens.