
Research
2025 Report: Destructive Malware in Open Source Packages
Destructive malware is rising across open source registries, using delays and kill switches to wipe code, break builds, and disrupt CI/CD.
github.com/kingavatar/lmsscrapergo
Advanced tools
A Daemon Scraping Service for LMS(Learning Management System) written for my college IIITB but can serve as template for other LMS portals as well.
This Application is written in Go (golang) and scrapes for assignments and announcements of favorite(starred in LMS) courses.
port:9977) so can be read on other devices on the network as well.conky and terminal( with true color).Go concurrency.Make sure to have latest go version installed.
$ go version
go version go1.15.2 linux/amd64
To Fetch the Source.
To install in a local directory temporarily change GOPATH variable.
$ export GOPATH=$HOME/{path} ; go get github.com/kingavatar/lmsScraperGo
Before Building please change the login authentication Variables in login.go file present in scraper folder.
var (
username = "XXXXXX"
password = "XXXXXX"
)
Then Build the source and copy the binary to local bin folder[optional].
$ go build github.com/kingavatar/lmsScraperGo
$ cp lmsScraperGo ~/.local/bin/
First you have to install the service.
$ sudo lmsScraperGo install
Install kingavatar lmsScraper Service: [ OK ]
Root is required to install the daemon service in systemd/system folder. The service name is kingScraper.
Then start the service.
$ sudo lmsScraperGo start
Starting kingavatar lmsScraper Service: [ OK ]
Then to see the service pid run with the status command.
$ sudo lmsScraperGo status
Service (pid pidno) is running...
To see the actual log outputs see using systemctl or systemd command.
$ sudo systemctl status kingScraper
To stop the service
$ sudo lmsScraperGo stop
Stopping kingavatar lmsScraper Service: [ OK ]
To remove the service from the system
$ sudo lmsScraperGo remove
Removing kingavatar lmsScraper Service: [ OK ]
You can also run it temporarily
$ lmsScraperGo
Please stop the daemon service to avoiding binding to same port or you will receive the following error.
Error: listen tcp :9977: bind: address already in use
You can also run it in debug mode to get more logs.
$ lmsScraperGo -d
You can use netcat or other services which connects and reads socket to get the scraped output.
To get events(Assignments) and announcements for starred Courses.
$ echo "events" | nc localhost 9977
$ echo "announcements" | nc localhost 9977
To get Terminal( with true color) colorful output.
$ echo -e $(echo "eventsterm" | nc localhost 9977)
$ echo -e $(echo "announcementsterm" | nc localhost 9977)
For Conky you can use the below example for getting output every 5 minutes.
execpi 300 echo "eventsconky" | nc localhost 9977
execpi 300 echo "announcementsconky" | nc localhost 9977
FAQs
Unknown package
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
Destructive malware is rising across open source registries, using delays and kill switches to wipe code, break builds, and disrupt CI/CD.

Security News
Socket CTO Ahmad Nassri shares practical AI coding techniques, tools, and team workflows, plus what still feels noisy and why shipping remains human-led.

Research
/Security News
A five-month operation turned 27 npm packages into durable hosting for browser-run lures that mimic document-sharing portals and Microsoft sign-in, targeting 25 organizations across manufacturing, industrial automation, plastics, and healthcare for credential theft.