
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
dnp3time)dnp3time is a CLI tool designed to synchronize time on systems using the Distributed Network Protocol (DNP3). It enables users to send time synchronization commands to DNP3 outstations with either user-specified or interactively provided timestamps.
dnp3time is available on crates.io. You can easily install it using cargo:
cargo install dnp3time
This will install the dnp3time binary and make it available globally on your system.
Alternatively, you can build the tool from source. First, clone the repository and use cargo to build it:
git clone https://github.com/ladderlogix/DNP3TimmingAttack.git
cd DNP3TimmingAttack
cargo build --release
The binary will be located in the target/release/ directory.
Prebuilt binaries for Windows and Linux are available on the Releases page. You can download them directly instead of building the tool manually.
Run the tool with the following command:
dnp3time --ip <outstation_ip:port> --time <YYYY-MM-DD HH:MM:SS>
Example:
dnp3time --ip 10.152.152.152:20000 --time "2023-11-12 14:23:00"
Alternatively, you can run the command interactively without the --time flag to input a timestamp at runtime:
dnp3time --ip 10.152.152.152:20000
--ip (-i): The IP address and port of the DNP3 outstation (default: 10.152.152.152:20000).--time (-t): The target date and time in the format YYYY-MM-DD HH:MM:SS (optional).A typical use case involves specifying the outstation's IP address and port along with the desired timestamp. If the timestamp is omitted, the tool will prompt for it interactively. This makes the tool flexible for both pre-configured and ad-hoc time synchronization.
This repository includes CI/CD pipelines via GitHub Actions for:
See the GitHub Actions workflow file at .github/workflows/main.yml for more details.
This project is licensed under the AGPL-3.0.
Interested in contributing? See the CONTRIBUTING.md file for details.
FAQs
Unknown package
We found that dnp3time demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.