
Research
/Security News
Critical Vulnerability in NestJS Devtools: Localhost RCE via Sandbox Escape
A flawed sandbox in @nestjs/devtools-integration lets attackers run code on your machine via CSRF, leading to full Remote Code Execution (RCE).
@twilio-labs/plugin-dev-phone
Advanced tools
A Twilio CLI Plugin for the Twilio Dev Phone.
To use the Dev Phone, you'll need to first have an up-to-date installation of the Twilio CLI, as well as access to a spare Twilio phone number. That means that you'll need an upgraded Twilio account, not a trial account.
Once you've installed the Twilio CLI, you're ready to add the Dev Phone plugin with the following command:
twilio plugins:install @twilio-labs/plugin-dev-phone
Once it's installed, you can run the Dev Phone with the following command:
twilio dev-phone
Check out the Dev Phone documentation to learn more about installing and using the Dev Phone.
twilio dev-phone
Dev Phone local express server
USAGE
$ twilio dev-phone [-l (debug|info|warn|error|none)] [-o (columns|json|tsv|none)] [--silent] [-p <value>] [-f
--phone-number <value>] [--headless] [--clear] [--port <value>]
FLAGS
-f, --force Optional. Forces an overwrite of the phone number configuration.
-l=(debug|info|warn|error|none) [default: info] Level of logging messages.
-o=(columns|json|tsv|none) [default: columns] Format of command output.
-p, --profile=<value> Shorthand identifier for your profile.
--clear Optional. Remove all dev-phone resources from your account before starting the
dev-phone.
--headless Optional. Prevents the UI from automatically opening in the browser.
--phone-number=<value> Optional. Associates the Dev Phone with a phone number. Takes a number from the
active profile on the Twilio CLI as the parameter.
--port=<value> Optional. Configures the port of the Dev Phone UI. Takes a valid port as a parameter.
--silent Suppress output and logs. This is a shorthand for "-l none -o none".
DESCRIPTION
Dev Phone local express server
See code: src/commands/dev-phone.ts
Notes for folks working on this plugin are in DEVELOPMENT.md.
FAQs
Twilio Dev Phone
The npm package @twilio-labs/plugin-dev-phone receives a total of 92 weekly downloads. As such, @twilio-labs/plugin-dev-phone popularity was classified as not popular.
We found that @twilio-labs/plugin-dev-phone demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
/Security News
A flawed sandbox in @nestjs/devtools-integration lets attackers run code on your machine via CSRF, leading to full Remote Code Execution (RCE).
Product
Customize license detection with Socket’s new license overlays: gain control, reduce noise, and handle edge cases with precision.
Product
Socket now supports Rust and Cargo, offering package search for all users and experimental SBOM generation for enterprise projects.