
Research
Security News
Malicious npm Packages Use Telegram to Exfiltrate BullX Credentials
Socket uncovers an npm Trojan stealing crypto wallets and BullX credentials via obfuscated code and Telegram exfiltration.
github.com/mouuff/go-rocket-update
Enable your Golang applications to easily and safely to self update.
Here is the list of projects using this package.
It provides the flexibility to implement different updating user experiences like auto-updating, or manual user-initiated updates, and updates from different sources.
The gopher in this image was created by Takuya Ueda, licensed under Creative Commons 3.0 Attributions license.
go get -u github.com/mouuff/go-rocket-update/...
Here is an example using Github releases:
u := &updater.Updater{
Provider: &provider.Github{
RepositoryURL: "github.com/mouuff/go-rocket-update-example",
ArchiveName: fmt.Sprintf("binaries_%s.zip", runtime.GOOS),
},
ExecutableName: fmt.Sprintf("go-rocket-update-example_%s_%s", runtime.GOOS, runtime.GOARCH),
Version: "v0.0.1",
}
if _, err := u.Update(); err != nil {
log.Println(err)
}
For more examples, please take a look at some code samples and this example project.
The updater uses a Provider
as an input source for updates. It provides files and version for the updater.
Here is few examples of providers:
provider.Github
: It will check for the latest release on Github with a specific archive name (zip or tar.gz)provider.Gitlab
: It will check for the latest release on Gitlab with a specific archive name (zip or tar.gz)provider.Local
: It will use a local folder, version will be defined in the VERSION file (can be used for testing, or in a company with a shared folder for example)provider.Zip
: It will use a zip
file. The version is defined by the file name (Example: binaries-v1.0.0.tar.gz
). Use GlobNewestFile to find the right file.provider.Gzip
: Same as provider.Zip
but with a tar.gz
file.The updater will list the files and retrieve them the same way for all the providers:
The directory should have files containing ExecutableName
.
Example directory content with ExecutableName: fmt.Sprintf("test_%s_%s", runtime.GOOS, runtime.GOARCH)
:
test_windows_amd64.exe
test_darwin_amd64
test_linux_arm
We recommend using goxc for compiling your Go application for multiple platforms.
This project is currently under construction, here is some of the things to come:
FAQs
Unknown package
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket uncovers an npm Trojan stealing crypto wallets and BullX credentials via obfuscated code and Telegram exfiltration.
Research
Security News
Malicious npm packages posing as developer tools target macOS Cursor IDE users, stealing credentials and modifying files to gain persistent backdoor access.
Security News
AI-generated slop reports are making bug bounty triage harder, wasting maintainer time, and straining trust in vulnerability disclosure programs.