
Research
npm Malware Targets Telegram Bot Developers with Persistent SSH Backdoors
Malicious npm packages posing as Telegram bot libraries install SSH backdoors and exfiltrate data from Linux developer machines.
@byte-this/js-cli
Advanced tools
Functionality to streamline the process of scripting for the console with javascript
Streamline the process of creating a CLI using javascript / typescript.
For a demo + instructions on how to use: https://bytethisstore.com/articles/pg/js-cli
This readme will outline how to use this project. If you'd like to view an example, or just jump in, the example-cli.ts script contains a basic cli application with a few sample commands.
const TestCommand: iCliCommand = {
name: "Test Command", //name for internal use
displayText: "Print some test text to the console",
tokens: ["test-print", "t-p"],
requiredParams: [
{
name: "txt",
displayText: "Text to print",
},
],
execute: async (
params: { txt: string },
cliOutputter: iCliOutputter
): Promise<void> => {
cliOutputter.pushMessage("Txt from user ==>", params.txt);
},
};
With this kind of definition, the program will request everything under requiredParams from the user, then execute the command and pass in those required commands.
Then, we setup our application runner:
const app = new CliApplication();
app.onQuit(() => {
process.exit(0);
});
app.startApp(
{
startup: {
initialOutput: "Welcome to the example application",
},
},
new ArrayCliCommandsCollection(commands),
[...process.argv].slice(2),
new ConsoleOutputter(),
new ConsoleUserInputRequestor(new ConsoleOutputter())
);
FAQs
Functionality to streamline the process of scripting for the console with javascript
The npm package @byte-this/js-cli receives a total of 17 weekly downloads. As such, @byte-this/js-cli popularity was classified as not popular.
We found that @byte-this/js-cli demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Malicious npm packages posing as Telegram bot libraries install SSH backdoors and exfiltrate data from Linux developer machines.
Security News
pip, PDM, pip-audit, and the packaging library are already adding support for Python’s new lock file format.
Product
Socket's Go support is now generally available, bringing automatic scanning and deep code analysis to all users with Go projects.