
Research
Malicious npm Packages Impersonate Flashbots SDKs, Targeting Ethereum Wallet Credentials
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
Lightweight Ruby library for executing tasks in a seperate Ruby subprocesses
Ruby very rarely releases memory back to the operating system once allocated. This gem realizes a neat trick as suggested by the Book "Ruby Performance Optimization" by Alexander Dymo: https://pragprog.com/book/adrpo/ruby-performance-optimization
The crucial point is that exiting a subprocess will force Ruby to release all the memory allocated in the subprocess back to the OS.
class DecadentMemoryConsumer
…
# Needs a lot of memory
# to execute some magical
# task
…
end
# If the predicate :memory_almost_exceeded? evaluates to true,
# the block will be executed in a forked subprocess
# that is forced to terminate afterwards
Diverter.new(condition: memory_almost_exceeded?) do
DecadentMemoryConsumer.perform_memory_expensive_operation
end
# condition defaults to true, so this is equivalent of condition set to true
Diverter.new do
DecadentMemoryConsumer.perform_memory_expensive_operation
end
Initial version
FAQs
Unknown package
We found that diverter demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
Security News
Ruby maintainers from Bundler and rbenv teams are building rv to bring Python uv's speed and unified tooling approach to Ruby development.
Security News
Following last week’s supply chain attack, Nx published findings on the GitHub Actions exploit and moved npm publishing to Trusted Publishers.