
Research
Using Trusted Protocols Against You: Gmail as a C2 Mechanism
Socket uncovers malicious packages on PyPI using Gmail's SMTP protocol for command and control (C2) to exfiltrate data and execute commands.
@architect/create
Advanced tools
@architect/create
Architect Create: Bootstrap new Architect projects, and idempotently create new project resources
npm init @architect [--runtime [node, deno, ruby, python]] [project name and/or path]
Example:
npm init @architect
......... create project named for current dir in current dir
npm init @architect ./
...... create project named for current dir in current dir
npm init @architect foo
..... create project namedfoo
in current dir
npm init @architect ./foo
... create./foo
dir and project namedfoo
that dir
npm init @architect ../foo
.. create../foo
dir and project namedfoo
that dir
npm init @architect /foo
.... create/foo
dir, creates project namedfoo
that dir
npm init @architect ../
..... create project in .. for named for whatever .. is named
[5.0.3] 2024-04-29
package.json
engines.node
property to reflect changes from v5FAQs
Idempotently initialize Architect projects
The npm package @architect/create receives a total of 3,526 weekly downloads. As such, @architect/create popularity was classified as popular.
We found that @architect/create demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 6 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Socket uncovers malicious packages on PyPI using Gmail's SMTP protocol for command and control (C2) to exfiltrate data and execute commands.
Product
We redesigned Socket's first logged-in page to display rich and insightful visualizations about your repositories protected against supply chain threats.
Product
Automatically fix and test dependency updates with socket fix—a new CLI tool that turns CVE alerts into safe, automated upgrades.