Research
Security News
Quasar RAT Disguised as an npm Package for Detecting Vulnerabilities in Ethereum Smart Contracts
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
github.com/jlandells/mm-csv-parser
This utility parses a supplied CSV file for a specified User ID field and looks up the matching username or full name in Mattermost. It's particularly useful for CSV exports from Boards or any situation where you have a CSV file containing Mattermost User IDs. Developed in Go, this tool allows for easy distribution and extension without the need for a Go development environment.
To use this utility, you'll need:
As the utility is written in Go and compiled into an executable, installation is as simple as downloading the relevant executable for your platform from the GitHub releases page and placing it in a suitable location on your system's path.
Here's how you can use the utility:
./mattermost_user_id_converter -url <your_mattermost_url> -port <mattermost_port> -scheme <http_or_https> -token <your_personal_access_token> -infile <path_to_input_csv> -outfile <path_to_output_csv> -column <user_id_column_name> [-fullname] [-debug]
Some of the parameters can also be supplied as environment variables, as seen in the table below:
Command Line Arg | Environment Variable | Description |
---|---|---|
-url | MM_URL | The URL of the Mattermost instance (without a schema) |
-port | MM_PORT | The Mattermost port to be used [default: 8065] |
-scheme | MM_SCHEME | The HHTP scheme to be used (http/https) [default: http] |
-token | MM_TOKEN | The user token for Mattermost. Note that this user must have the appropriate rights to read users. |
-infile | Required. CSV file for parsing. | |
-outfile | Required. Filename of output file. | |
-column | Required. The name of the column containing the User ID. | |
-fullname | Optional. If present, the output will contain the full name of the user, rather than their Mattermost username. | |
-debug | MM_DEBUG | If present, will run in debug mode, delivering additional output to stdout |
Your contributions are welcome! If you have suggestions for improving this utility, please open an issue or pull request in this repository. Whether it's bug reports, feature requests, or contributions to code, all are greatly appreciated.
This project is licensed under the Apache 2.0 License - see the LICENSE file for details.
For questions, feedback, or contributions regarding this project, please use the following methods:
FAQs
Unknown package
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
Security News
Research
A supply chain attack on Rspack's npm packages injected cryptomining malware, potentially impacting thousands of developers.
Research
Security News
Socket researchers discovered a malware campaign on npm delivering the Skuld infostealer via typosquatted packages, exposing sensitive data.