
Research
/Security News
Popular Tinycolor npm Package Compromised in Supply Chain Attack Affecting 40+ Packages
Malicious update to @ctrl/tinycolor on npm is part of a supply-chain attack hitting 40+ packages across maintainers
@cumulus/sftp-client
Advanced tools
A Promise-based SFTP client
npm install @cumulus/sftp-client
const { SftpClient } = require("@cumulus/sftp-client");
(async () => {
const sftpClient = new SftpClient({
host: "ssh.example.com",
port: 2222,
username: "my-username",
password: "my-password"
});
console.log(await sftpClient.list("./"));
})();
Type: object
Type: string
The hostname or IP address of the remote SFTP server.
Type: number
Default: 22
The TCP port to connect to.
Type: string
The username to use when connecting to the SFTP server.
Type: string
The password to use when connecting to the SFTP server.
Type: string
A private key to use when connecting to the SFTP server.
Download a remote file to disk. Returns a Promise
that resolves to a string
containing the local path that the file was saved to.
Type: string
The full path to the remote file to be fetched
Type: string
The full local destination file path
Close the connect to the SFTP server.
Returns a Promise
that resolves to an array
of object
s containing information about discovered files.
The returned file object
s will each contain name
, path
, type
, size
, and time
fields.
Type: string
The remote path to be listed.
Returns the ssh2-sftp-client
Client as a convenience.
Returns a Promise
that resolves to undefined
once a file has been transferred from S3 to the SFTP server.
Type: object
Type: string
The bucket containing the S3 object to be transferred to the SFTP server.
Type: string
The key of the S3 object to be transferred to the SFTP server.
Type: string
The full remote destination file path.
Returns a Promise
that resolves to a string
containing the S3 URI of the destination file
Type: string
The full path to the remote file to be fetched
Type: string
Destination S3 bucket of the file
Type: string
Destination S3 key of the file
Returns a Promise
that resolves to undefined
once the remote file has been deleted.
Type: string
The path to file on the SFTP server to be deleted
[v20.3.0] 2025-08-18
engine_version
default value to 17.4
in example/rds-cluster-tf/variables.tf
.tf-modules/cumulus-rds-tf
module to take additional parameter enable_upgrade
in support of
migration from Aurora PostgreSQl v13 to v17.>=1.12.2
5.100.x
FAQs
A Promise-based SFTP client
The npm package @cumulus/sftp-client receives a total of 388 weekly downloads. As such, @cumulus/sftp-client popularity was classified as not popular.
We found that @cumulus/sftp-client demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 6 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
/Security News
Malicious update to @ctrl/tinycolor on npm is part of a supply-chain attack hitting 40+ packages across maintainers
Security News
pnpm's new minimumReleaseAge setting delays package updates to prevent supply chain attacks, with other tools like Taze and NCU following suit.
Security News
The Rust Security Response WG is warning of phishing emails from rustfoundation.dev targeting crates.io users.