Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
h1. rb8-trepanning a Ruby MRI 1.8 and 1.9 debugger using ruby-debug-base.
This is a rewrite of ruby-debug, but still using ruby-debug base.
Right now, I've mostly tested on MRI 1.8, it sort of works on MRI 1.9.2 Ruby. Since the code is pure Ruby, it probably will work on other Rubies that have ruby-debug-base installed to some degree.
h2. Features
I realize the last item may not be of importance to many, but it's very important as a developer of the code.
There is a "google group mailing list":http://groups.google.com/group/ruby-debugger for Ruby debuggers.
h2. Installing (from git)
bq. $ git clone git://github.com/rocky/rb8-trepanning.git $ cd rb8-trepanning $ rake test $ rake install
h2. Background
ruby-debug is cool, but it became getting harder to work on and to extend it while keeping compatibility. The code never started out from a test-driven development standpoint--tests were bolted on afterwards.
Over time, I gained a better understanding of what was important (to me), and I learned how to do things better. So I decided to rewrite the code. This code base is a backport of the "trepanning debugger for Rubinius":https://github.com/rocky/rbx-trepanning/wiki which in turn is a port of the "trepanning debugger for a patched MRI YARV 1.9.2":https://github.com/rocky/rb-trepanning/wiki which is a port of "a debugger for Python":http://code.google.com/p/pydbgr/ which is a port of ruby-debug.
h2. Compatibility with ruby-debug
Compatiblity between ruby-debug and trepanning is like compatibility between Ruby 1.8 and Ruby 1.9.
Here are some incompatibilities. Depending on your point of view, I hope you will find as I do that these are improvements:
h2. Dependencies
The debugger needs to work in more limited environments, so there are a number packages which are optional but not required. They are:
Required dependencies are the same as ruby-debug:
FAQs
Unknown package
We found that rb8-trepanning demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.