
Research
Malicious fezbox npm Package Steals Browser Passwords from Cookies via Innovative QR Code Steganographic Technique
A malicious package uses a QR code as steganography in an innovative technique.
@friedrith/notify
Advanced tools
A easy-to-use command line interface to notify you when a very long terminal process is finished
A easy-to-use command line interface to notify you when a very long terminal process is finished.
$ npm install -g @friedrith/notify
# or with yarn
$ yarn add --global @friedrith/notify
$ <command to wait> ; notify
$ notify -h # for help
You can customize the notification on the fly
$ <command to wait> ; notify --adapter native --message "Customized message"
You can also use a configuration file :
{
"adapter": "native",
"message": "Customized message"
}
By default, notify tries to load configuration file located in /home/<user>/.notify but you can specify the path:
$ <command to wait> ; notify --config <path>
Adapters are the way to display the notification. By default, only the native os notification systems are enabled but you can setup new adapters like Slack for example.
Do not hesitate to propose new adapters like Microsoft team, facebook, sms, etc.
The first step is to create an Slack app on your slack workspace and to authorize incoming webhooks. You should get a webhook url.
Then
$ <command to wait> ; notify --adapter slack --webhook <webhook>
or in your configuration file :
{
"adapter": "slack",
"webhook": "<webhook>"
}
FAQs
A easy-to-use command line interface to notify you when a very long terminal process is finished
We found that @friedrith/notify demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
A malicious package uses a QR code as steganography in an innovative technique.
Research
/Security News
Socket identified 80 fake candidates targeting engineering roles, including suspected North Korean operators, exposing the new reality of hiring as a security function.
Application Security
/Research
/Security News
Socket detected multiple compromised CrowdStrike npm packages, continuing the "Shai-Hulud" supply chain attack that has now impacted nearly 500 packages.