
Research
Malicious fezbox npm Package Steals Browser Passwords from Cookies via Innovative QR Code Steganographic Technique
A malicious package uses a QR code as steganography in an innovative technique.
@mikestreety/data-collector
Advanced tools
Built with https://oclif.io/
npm i @mikestreety/data-collector
You can then access it with the following:
./node_modules/.bin/datacollector
In your package.json
, you can add specific commands or a shortcut to the main command
"scripts": {
"datacollector": "datacollector"
},
With this set, you can pass in your commands to a slightly shorter (and more memorable) command:
npm run datacollector -- letterboxd letterboxd.json -u mikestreety
You can install it globally if you wish
npm i -g @mikestreety/data-collector
Which would allow you to run datacollector
in your terminal
-d
, --domain
- the domain to get the webmentions from-t
, --token
- your webmentions token from https://webmention.io/settingsdatacollector webmentions webmentions.json --domain www.mikestreety.co.uk --token 123456
Code adapted from Max Böck's 11ty Webmentions repo
Any RSS feed provided (or searches for RSS) of a given domain
-f
, --feed
- the RSS feed-d
, --domain
- the domain to search for the RSS feedsdatacollector letterboxd rss.json -f https://www.mikestreety.co.uk/rss-notes.xml
or
datacollector letterboxd rss.json -d www.mikestreety.co.uk
Get the films for a user from letterboxd
-u
, --username
- the Letterboxd usernamedatacollector letterboxd letterboxd.json -u mikestreety
.env
filesOnce ready to release, run the following
npm version (major|minor|patch)
npm publish
FAQs
Own your own data
We found that @mikestreety/data-collector demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
A malicious package uses a QR code as steganography in an innovative technique.
Research
/Security News
Socket identified 80 fake candidates targeting engineering roles, including suspected North Korean operators, exposing the new reality of hiring as a security function.
Application Security
/Research
/Security News
Socket detected multiple compromised CrowdStrike npm packages, continuing the "Shai-Hulud" supply chain attack that has now impacted nearly 500 packages.