
Security News
Free Certified Patch for Critical Rails Active Storage Vulnerability
Socket has released a free Certified Patch for a critical Rails Active Storage vulnerability, giving developers time to upgrade to a secure Rails version.
@shhhum/xftp-web
Advanced tools
Browser-compatible XFTP file transfer client in TypeScript.
cabal (to build xftp-server)# Build the XFTP server binary (from repo root)
cabal build xftp-server
# Install JS dependencies
cd xftp-web
npm install
# Install Chromium for Playwright (browser tests)
npx playwright install chromium
If Chromium fails to launch due to missing system libraries, install them with:
# Requires root
npx playwright install-deps chromium
# Browser round-trip test (vitest + Playwright headless Chromium)
npm run test
The browser test automatically starts an xftp-server instance on port 7000 via globalSetup, using certs from tests/fixtures/.
npm run build
Output goes to dist/.
FAQs
XFTP file transfer protocol client for web/browser environments
The npm package @shhhum/xftp-web receives a total of 22 weekly downloads. As such, @shhhum/xftp-web popularity was classified as not popular.
We found that @shhhum/xftp-web demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
Socket has released a free Certified Patch for a critical Rails Active Storage vulnerability, giving developers time to upgrade to a secure Rails version.

Security News
/Threat Research
A malicious Ruby gem runs a credential-stealing worm during installation, poisons AI coding tools, and can wipe files when a stolen GitHub token is revoked.

Security News
GitHub is tightening GitHub Actions security with new restrictions on privileged pull request workflows. Here's what changes and how maintainers are affected.