Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
A generator for RSS 2.0 conform xml files.
Just about compliant with the RSS 2.0 specification.
HTML control tokens are escaped correctly, to get unescaped and displayed later on for Consumers.
Implemented as single class file with zero external dependencies.
This example code:
RSS rss=RSS.Builder
.getInstance()
.title("Example News Headlines")
.link(new URL("https://news.example.org/"))
.description("Example news on the internet.")
.language("en")
.copyright("Copyright 2021, Owner of thoughts and words")
.lastBuildDate(RSS.Date.now())
.ttl(1440)
.build();
rss.addItem()
.title("Really early morning no-coffee notes")
.description("<p>When someone accuses you of a <a href=\"http://www.dictionary.com/search?q=deceit\">deceit</a>, there's a very good chance the accuser practices that form of deceit, and a reasonable chance that he or she is doing it as they point the finger.</p>")
.link(new URL("https://scriptingnews.userland.com/backissues/2002/09/29#reallyEarlyMorningNocoffeeNotes"))
.guid(new URL("https://scriptingnews.userland.com/backissues/2002/09/29#reallyEarlyMorningNocoffeeNotes"))
.pubDate(RSS.Date.of("Sun, 29 Sep 2002 11:13:10 GMT"))
.source("Scripting News",new URL("http://static.userland.com/gems/backend/rssTwoExample2.xml"))
.build();
rss.addItem()
.title("Sharp tools for emergencies and the --clowntown flag")
.link(new URL("https://rachelbythebay.com/w/2020/10/27/argv/"))
.guid(new URL("https://rachelbythebay.com/w/2020/10/27/argv/"))
.category("sysadmin war stories")
.source("rachelbythebay : Writing",new URL("https://rachelbythebay.com/w/atom.xml"))
.build();
rss.writeFile(new File("rss.xml"),1);
Produces the following output:
<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0">
<channel>
<title>Example News Headlines</title>
<link>https://news.example.org/</link>
<description>Example news on the internet.</description>
<language>en</language>
<copyright>Copyright 2021, Owner of thoughts and words</copyright>
<lastBuildDate>Tue, 06 Jul 2021 18:01:13 CEST</lastBuildDate>
<ttl>1440</ttl>
<generator>rssgen 1.0.0-SNAPSHOT</generator>
<item>
<title>Really early morning no-coffee notes</title>
<description><p>When someone accuses you of a <a href="http://www.dictionary.com/search?q=deceit">deceit</a>, there's a very good chance the accuser practices that form of deceit, and a reasonable chance that he or she is doing it as they point the finger.</p></description>
<link>https://scriptingnews.userland.com/backissues/2002/09/29#reallyEarlyMorningNocoffeeNotes</link>
<guid isPermaLink="true">https://scriptingnews.userland.com/backissues/2002/09/29#reallyEarlyMorningNocoffeeNotes</guid>
<pubDate>Sun, 29 Sep 2002 11:13:10 GMT</pubDate>
<source url="http://static.userland.com/gems/backend/rssTwoExample2.xml">Scripting News</source>
</item>
<item>
<title>Sharp tools for emergencies and the --clowntown flag</title>
<link>https://rachelbythebay.com/w/2020/10/27/argv/</link>
<guid isPermaLink="true">https://rachelbythebay.com/w/2020/10/27/argv/</guid>
<category>sysadmin war stories</category>
<source url="https://rachelbythebay.com/w/atom.xml">rachelbythebay : Writing</source>
</item>
</channel>
</rss>
For more information, check the: RSS 2.0 specification (mirror, mirror)
FAQs
A generator for RSS 2.0 conform xml files.
We found that cc.neckbeard:rssgen demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.