Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
github.com/hansellobo/word-cloud-generator
It's a golang web app that takes a block of text and turns it into a word cloud. f you like the class be sure to start the repo one more time.another time.
This project is under active development. This project is being created as a sample app for an upcoming training class on Continuous Delivery with Lynda.com. You can see previous courses we have made at https://lynda.com/JamesWickett. Thanks!
export GOPATH="${HOME}/go"
export PATH=$PATH:$(go env GOPATH)/bin
go get github.com/tools/godep
go get github.com/smartystreets/goconvey
go get github.com/GeertJohan/go.rice/rice
We use git hooks to standardize development on the project. Please run make git-hooks
to get started.
This will pull down dependencies, run unit tests, and compile a linux, mac and windows binary into ./artifacts.
make
You can build and install a copy in your local $GOPATH/bin directory with:
make install
make clean
make test
make goconvey
make rice
make run
or just run the executable. It will run as a daemon and bind to port 8888, and you can see it by going to http://localhost:8888 in your browser.
$ curl -H "Content-Type: application/json" -d '{"text":"ths is a really really really important thing this is"}' http://localhost:8888/api
Use this setup
aws_access_key_id = AKIAIOSFODNN7EXAMPLE aws_secret_access_key = wJalrXUtnFEMI/K7MDENG/bPxRfiCYEXAMPLEKEY
FAQs
Unknown package
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.