Security News
Supply Chain Attack Detected in Solana's web3.js Library
A supply chain attack has been detected in versions 1.95.6 and 1.95.7 of the popular @solana/web3.js library.
github.com/jramnani/go-ftp
Status: Experimental
TODO:
FTP Protocol Command Summary
Log in USER username PASS password
Set the TYPE TYPE I (binary) for binary files or TYPE A (ascii) for text files
Sample Response: 200 Type set to A or I
Set Passive transfer mode PASV Computing the destination port from the actual respone (127,0,0,1,201,208) The first four octets are the IP address while the last two octets comprise the port that will be used for the data connection. To find the actual port multiply the fifth octet by 256 and then add the sixth octet to the total
Sample Response: 227 Entering Passive Mode (127,0,0,1,201,208)
Retrieve the file RETR [file] After you call RETR the data port will open and be available to download the file. RETR doesn't return immediately, but waits until you open a connection to the data port and download the file.
Sample Response: 150 opening connection
Open connection to data port Read data bytes to a file Sample Response: 226 Transfer complete
Close data port
Close the connection (optional, if you want to download multiple files in one session) QUIT
$ telnet localhost 21 220 ProFTPD 1.3.2c Server (ProFTPD Test Server) [127.0.0.1] USER 500 USER: command requires a parameter USER anonymous 331 Anonymous login ok, send your complete email address as your password PASS foo 230 Anonymous access granted, restrictions apply
TYPE I 200 Type set to I PASV 227 Entering Passive Mode (127,0,0,1,201,208).
RETR test_file.txt 150 Opening BINARY mode data connection for test_file.txt (12 bytes) 226 Transfer complete QUIT 221 Goodbye.
FAQs
Unknown package
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
A supply chain attack has been detected in versions 1.95.6 and 1.95.7 of the popular @solana/web3.js library.
Research
Security News
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
Security News
Research
Socket researchers have discovered malicious npm packages targeting crypto developers, stealing credentials and wallet data using spyware delivered through typosquats of popular cryptographic libraries.