Research
Security News
Malicious npm Package Targets Solana Developers and Hijacks Funds
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
github.com/gaoyb7/115drive-webdav
115 网盘 WebDav 服务,可配合支持 WebDAV 协议的客户端 App 食用,如 Infuse、nPlayer
新项目 rclone 改版,对比 115drive-webdav 功能更强大,支持 WebDav 服务,本地磁盘挂载,文件批量下载到本地等功能。https://github.com/gaoyb7/rclone-release
https://github.com/gaoyb7/115drive-webdav/releases
需要获取 115 网盘 Cookie 信息,包括 UID、CID、SEID,网页版 Cookie 时效较短,建议抓包 App 请求获取 Cookie,iOS 系统可使用 Stream 抓包,安卓系统使用抓包精灵
./115drive-webdav --host=0.0.0.0 --port=8080 --user=user --pwd=123456 --uid=xxxxxx --cid=xxxxxxx --seid=xxxxx
服务启动成功后,用支持 WebDav 协议的客户端连接即可,不支持浏览器直接打开
# 通过命令参数获取配置
docker run -d \
-p 8081:8081 \
--restart unless-stopped \
gaoyb7/115drive-webdav:latest \
--host=0.0.0.0 --port=8081 \
--user=user --pwd=123456 \
--uid=xxxxxx \
--cid=xxxxxx \
--seid=xxxxxx
# 通过配置文件获取配置
# /path/to/your/config 替换为实际配置文件地址
docker run -d \
-p 8081:8081 \
-v /path/to/your/config:/etc/115drive-webdav.json \
--restart unless-stopped \
gaoyb7/115drive-webdav \
--config /etc/115drive-webdav.json
--host
服务监听地址,默认 0.0.0.0
--port
服务监听端口,默认 8080
--user
WebDav 账户用户名,默认 user
--pwd
WebDav 账户密码,默认 123456
--uid
115 网盘 Cookie,UID
--cid
115 网盘 Cookie,CID
--seid
115 网盘 Cookie,SEID
--config
从文件中读取配置,参考 config.json.example
FAQs
Unknown package
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
Security News
Research
Socket researchers have discovered malicious npm packages targeting crypto developers, stealing credentials and wallet data using spyware delivered through typosquats of popular cryptographic libraries.
Security News
Socket's package search now displays weekly downloads for npm packages, helping developers quickly assess popularity and make more informed decisions.