
Research
/Security News
9 Malicious NuGet Packages Deliver Time-Delayed Destructive Payloads
Socket researchers discovered nine malicious NuGet packages that use time-delayed payloads to crash applications and corrupt industrial control systems.
@36node/fastman
Advanced tools
yarn global add @36node/fastman
$ fastman -h
Usage: cli [options] [command]
Options:
-V, --version output the version number
-h, --help output usage information
Commands:
config [options] config fastman, like postman api key eg..
ls list collections exist in postman
delete [id] delete collection by id
import [file] import a collection file to postman
export [name] [dist] export collection file with name, saved in dist
You can get your key from the integrations dashboard
fastman config -a <your-api-key>
# list collections in postman, display id and name
$ fastman ls
190e1e16-7e25-4be8-97e1-2f012f941ce4 collection1
1f768e27-5f39-4a5f-8ce8-7a028e504fcf collection2
2923edc5-f23c-47f9-b5d4-4657676681d2 collection3
# specify dist
$ fastman export collection1 ./try_collection.json
# empty dist, auto saved in <name>.postman_collection.json
$ fastman export collection1
# if collection name existed in postman, update it, or else create new collection.
$ fastman import ./.try_collection.json
git checkout -b my-new-featuregit commit -am 'Add some feature'git push origin my-new-featurefastman © 36node, Released under the MIT License.
Authored and maintained by 36node with help from contributors (list).
github.com/zzswang · GitHub @36node
FAQs
A tool to export and import postman collection file
We found that @36node/fastman demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 4 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
Socket researchers discovered nine malicious NuGet packages that use time-delayed payloads to crash applications and corrupt industrial control systems.

Security News
Socket CTO Ahmad Nassri discusses why supply chain attacks now target developer machines and what AI means for the future of enterprise security.

Security News
Learn the essential steps every developer should take to stay secure on npm and reduce exposure to supply chain attacks.