Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
github.com/AlexSSd7/linsk
Linsk is a utility that allows you to access Linux-native file system infrastructure, including LVM and LUKS on Windows and macOS. Unlike other solutions created to access Linux filesystems on unsupported operating systems, Linsk does not reimplement any file system. Instead, Linsk utilizes a lightweight Alpine Linux VM (~130 MB only) combined with network share technologies like SMB, AFP, and FTP.
Because Linsk uses a native Linux VM, there are no limitations on what you can access. Anything that works on Linux will work under Linsk too (hence the Linux+Disk name).
To show your thanks, please star this repository if you found it useful.
Linsk natively supports both x86_64 (aka amd64, Intel, AMD, etc.) and aarch64 (aka arm64, Apple M1/M2, and others).
Although Linsk uses a virtual machine, the CPU is never emulated but the hardware accelerators like HVF (macOS), WHPX (Windows), and KVM (Linux) are used.
Linsk relies on network file shares to expose files to the host machine. Below are the types of network shares Linsk supports:
Linsk versions below v0.2.0 are considered obsolete UNLESS:
More information: serious-bug-disclosures/README.md
Please see CONTRIBUTING.md.
Copyright (c) 2023 The Linsk Authors.
Provided under the GNU General Public License v3. The copy of the license is included in the LICENSE file.
Use this git
command to view the list of Linsk Authors:
git log --format='%aN <%aE>' | sort -uf
FAQs
Unknown package
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.