
Research
SANDWORM_MODE: Shai-Hulud-Style npm Worm Hijacks CI Workflows and Poisons AI Toolchains
An emerging npm supply chain attack that infects repos, steals CI secrets, and targets developer AI toolchains for further compromise.
gavin is a self contained instance of Organice.
It combines a WebDAV server and the Organice assets into a single binary that can be run from virtually everywhere.
gavin can be used as a standalone webserver or placed behind a reverse proxy.
Please note: gavin expects the .htpasswd file to use bcrypt as the hashing
algorithm!
htpasswd .htpasswd $USER
htpasswd -B -c .htpasswd $USER
Releases can be downloaded for common OSs here:
https://github.com/qbit/gavin/releases
.htpasswd file.gavin pointing it at your org files:gavin -davdir ~/org
Now you log into gavin with the following settings:
URL: https://localhost:8080/dav Username: $USER Password: $YOURPASSWORD
gavin -domain gavin.example.com -http $externalIP:443
If you would like to specify where gavin stores the certificates the -cache
flag can be used.
By default gavin will listen on port 80 for ACME requests. This can be
changed using the -alisten flag, however, note that ACME always sends
requests over port 80, so you will need something that forwards requests onto
gavin.
FAQs
Unknown package
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
An emerging npm supply chain attack that infects repos, steals CI secrets, and targets developer AI toolchains for further compromise.

Company News
Socket is proud to join the OpenJS Foundation as a Silver Member, deepening our commitment to the long-term health and security of the JavaScript ecosystem.

Security News
npm now links to Socket's security analysis on every package page. Here's what you'll find when you click through.