Research
Security News
Malicious npm Package Targets Solana Developers and Hijacks Funds
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
Expgen solves a very simple problem: Given a regular expression, find a string which matches that regular expression. Use it like this:
Expgen.gen(/foo\w+b[a-z]{2,3}/) # => "fooxbdp"
For a full list of supported syntax, see the spec file.
Some things are really difficult to generate accurate expressions for, it's
even quite easy to create a regexp which matches no strings. For example
/a\bc/
will not match any string, since there can never be a word boundary
between characters.
When given a negative character class, Expgen takes the entire ASCII character set (sans control characters) and removes from it any characters excluded by the character class. In other words, if the character class excludes the entire ASCII character set, Expgen will be unable to fill this space.
The following is a list of things Expgen does not support:
There is a gem called Randexp which does much the same thing. Expgen differs from Randexp in two important ways. (1) It actually works. (2) It supports a much wider range of regexp syntax.
The idea behind Expgen is that you should be able to take any reasonable, real world regular expression and be able to generate matching strings. The focus is on finding Strings which match a particular expression, not necessarily using it as a random generator.
MIT, see separate LICENSE.txt file
FAQs
Unknown package
We found that expgen demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
Security News
Research
Socket researchers have discovered malicious npm packages targeting crypto developers, stealing credentials and wallet data using spyware delivered through typosquats of popular cryptographic libraries.
Security News
Socket's package search now displays weekly downloads for npm packages, helping developers quickly assess popularity and make more informed decisions.