Research
Security News
Threat Actor Exposes Playbook for Exploiting npm to Build Blockchain-Powered Botnets
A threat actor's playbook for exploiting the npm ecosystem was exposed on the dark web, detailing how to build a blockchain-powered botnet.
@haad/go-ipfs-dep
Advanced tools
Install the latest go-ipfs binary from http://dist.ipfs.io
npm install go-ipfs --save
See IPFS getting-started. If anything goes wrong, try using: http://ipfs.io/docs/install.
Warning: The binary gets put in the go-ipfs
folder inside the module folder.
Can be specified in package.json
with a field go-ipfs.version
, eg:
"go-ipfs": {
"version": "v0.4.5-pre1"
},
Can be specified in package.json
with a field go-ipfs.version
, eg:
"go-ipfs": {
"version": "v0.4.5-pre1",
"distUrl": "http://localhost:8080/ipfs/QmSoNtqW22htkg9mtHWNBvZLUEmqfq8su7957meS1iQfeL"
},
Where QmSoNtqW22htkg9mtHWNBvZLUEmqfq8su7957meS1iQfeL
is the root of the distributions web site.
Or when run with node src/bin.js
, the dist url can be passed via an environment variable GO_IPFS_DIST_URL
, eg:
GO_IPFS_DIST_URL=http://localhost:8080/ipfs/QmSoNtqW22htkg9mtHWNBvZLUEmqfq8su7957meS1iQfeL node binsrc/bin.js
When used via node src/bin.js
, you can specify the target platform, version and architecture via environment variables:
TARGET_OS
See: Supported Platforms for possible values.
TARGET_VERSION
See: Supported Versions for possible values.
TARGET_ARCH
See: Supported Architectures for possible values.
Or via command line arguments in the order of:
node src/bin.js <version> <platform> <architecture> <install directory>
node src/bin.js v0.4.5-pre1 linux amd64 ./go-ipfs
For programmatic usage, see https://github.com/haadcode/go-ipfs-dep/blob/master/src/index.js#L18
FAQs
Install the latest go-ipfs binary
The npm package @haad/go-ipfs-dep receives a total of 1 weekly downloads. As such, @haad/go-ipfs-dep popularity was classified as not popular.
We found that @haad/go-ipfs-dep demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
A threat actor's playbook for exploiting the npm ecosystem was exposed on the dark web, detailing how to build a blockchain-powered botnet.
Security News
NVD’s backlog surpasses 20,000 CVEs as analysis slows and NIST announces new system updates to address ongoing delays.
Security News
Research
A malicious npm package disguised as a WhatsApp client is exploiting authentication flows with a remote kill switch to exfiltrate data and destroy files.