
Research
/Security News
10 npm Typosquatted Packages Deploy Multi-Stage Credential Harvester
Socket researchers found 10 typosquatted npm packages that auto-run on install, show fake CAPTCHAs, fingerprint by IP, and deploy a credential stealer.
@tryghost/algolia
Advanced tools
CLI tool to initially index the full Ghost post content into an Algolia index.
CLI tool to initially index the full Ghost post content into an Algolia index.
npm install @tryghost/algolia --save
or
yarn add @tryghost/algolia
To use the CLI, install the dependencies with yarn install or npm install.
Copy the existing example.config.json to e. g. config.json and replace the relevant values for Ghost and Algolia.
indexSettings reflects the current default settings and can either be overwritten, or removed from the config file.
To run the batch index, run
yarn algolia index <pathToConfig> [options]
The Fragmenter breaks down large HTML pieces into smaller chunks by its headings. Sometimes the fragment is still too big and Algolia will throw an error listing the post id that caused the large fragment. The post id can be used to get the post slug, which then can be excluded from the batch run like this:
yarn algolia index <pathToConfig> -s post-slug-to-exclude,and-another-post-slug-to-exclude
pathToConfig, needs to be the relative (from this package) path to the config JSON file that contains the Ghost and Algolia API keys and settings (see usage above)
-s, --skip, takes a comma separated list of post slugs that need to be excluded from the index (see caveats above)
-V, --verbose, switches on verbose mode, but there's not much too see here (yet)
-l, --limit, limit the amount of posts to receive. Default is 'all'
-p --page, define the page to fetch posts from. To be used in combination with limit.
-sjs --skipjsonslugs, uses a list of slugs in config.json to skip before they're uploaded. This method will request all data from Ghost and skip at the point it would normally upload to Algolia. If you're getting 414 Request-URI Too Large errors using -s, this is the method to use.
This is a mono repository, managed with lerna.
Follow the instructions for the top-level repo.
git clone this repo & cd into it as usualyarn to install top-level dependencies.yarn devyarn lint run just eslintyarn test run lint and testsCopyright (c) 2013-2023 Ghost Foundation - Released under the MIT license.
FAQs
CLI tool to initially index the full Ghost post content into an Algolia index.
We found that @tryghost/algolia demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 28 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
Socket researchers found 10 typosquatted npm packages that auto-run on install, show fake CAPTCHAs, fingerprint by IP, and deploy a credential stealer.

Product
Socket Firewall Enterprise is now available with flexible deployment, configurable policies, and expanded language support.

Security News
Open source dashboard CNAPulse tracks CVE Numbering Authorities’ publishing activity, highlighting trends and transparency across the CVE ecosystem.