Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
github.com/xrsec/sslt
./sslt
# Port 8081
➜ ~ ./sslt -help
-------------------------------
_____ _____ . _______
( ( / ' /
`--. `--. | |
| | | |
\___.' \___.' /---/ /
----------------------
Usage of sslt:
-api
sslt api
-c string
Specified Country (default "US")
-h Display help information
-help
Display help information
-host string
Specified domain name (default "localhost")
-p string
Specified encryption protocol (default "rsa")
-r string
Import CA (default "sslt/ca.pem")
-rc string
Specified Root CommonName (default "GTS Root R1")
-rk string
Import CA Key (default "sslt/ca.key.pe")
-rlc string
Specified Root Locality
-rna string
Specified Root NotAfter
-ro string
Specified Root Organization (default "Google Trust Services LLC")
-rou string
Specified Root OrganizationalUnit
-rpc string
Specified Root PostalCode
-rpr string
Specified Root Province
-rsn string
Specified Root SerialNumber
-rst string
Specified Root StreetAddress
-s string
Import Cert CA (default "sslt/server.pem")
-sc string
Specified Server CommonName (default "GTS CA 1C3")
-sk string
Import Cert CA Key (default "sslt/server.key.pe")
-slc string
Specified Server Locality
-sna string
Specified Server NotAfter
-so string
Specified Server Organization (default "Google Trust Services LLC")
-sou string
Specified Server OrganizationalUnit
-spc string
Specified Server PostalCode
-spr string
Specified Server Province
-ssn string
Specified Server SerialNumber
-sst string
Specified Server StreetAddress
-v sslt version
-------------------------------
graph LR
Main((Main))-->Api{Api}-->gin{gin}
flowchart LR
gin{gin}-->Import{Import}--yes-->Sqlite3[(Sqlite3)]-->Import{Import}-->gin{gin};
flowchart LR
gin{gin}-->Sqlite3[(Sqlite3)]-->gin{gin};
flowchart LR
gin{gin}-->Choice{Choice}-->Sqlite3[(Sqlite3)]-->gin{gin};
[ shaneutt ] [ AndroidOL ] [ I3estD4rkKn1ght ]
FAQs
Unknown package
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.