Research
Security News
Quasar RAT Disguised as an npm Package for Detecting Vulnerabilities in Ethereum Smart Contracts
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
github.com/honza/gallery
Ansel is a self-hosted, zero-configuration image gallery application. With Ansel, you can showcase your photographs online without having to worry about who owns your work and how it can be used by third parties.
Ansel is written almost entirely in Clojure and is distributed as an uberjar. All you need to do is download the file and run it. Ansel handles resizing, exif data collection, captions, albums and much more. All of your data is internally stored as JSON and can be easily used by other applications. Ansel comes with a default set of templates and stylesheets and can be easily extended customized.
Users can also create accounts to post comments and likes. This feature is intended for family photo galleries.
You can see a demo here.
Make sure that you have Leiningen installed.
Clone the repository:
$ git clone git@github.com:honza/ansel.git
Download JavaScript assets with npm and bower:
$ lein npm install bower # if bower is not already installed
$ lein bower install
Run the server with code reloading:
$ lein ring server
Note that running the server this way disables the background saving.
Run the server including background saving. This is the same as running the uberjar:
$ lein run
You can download prebuilt jar files from the release page.
This is easy with leiningen:
$ lein uberjar
BSD, short and sweet
All contributions are welcome and appreciated. Feel free to open an issue if you have a question.
Thanks to @gotoplanb for the name.
FAQs
Unknown package
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
Security News
Research
A supply chain attack on Rspack's npm packages injected cryptomining malware, potentially impacting thousands of developers.
Research
Security News
Socket researchers discovered a malware campaign on npm delivering the Skuld infostealer via typosquatted packages, exposing sensitive data.