
Research
NPM targeted by malware campaign mimicking familiar library names
Socket uncovered npm malware campaign mimicking popular Node.js libraries and packages from other ecosystems; packages steal data and execute remote code.
@xwink/sftp
Advanced tools
这是一个命令行工具,通过sftp传输本地文件到远程服务器
npm install --save-dev @xwink/sftp
pnpm add --save-dev @xwink/sftp
查看使用帮助
npx wink-sftp --help
最少需要传入这六个参数
npx wink-sftp -l ./dist -r /apps/myapp -h xxx.xxx.xxx.xxx -p 22 -u root -pwd 123456
使用配置文件
npx wink-sftp -c ./sftp.json
配置文件
{
"local": "",
"remote": "",
"debug": false,
"connect": {
"host": "",
"port": 22,
"username": "",
"password": ""
},
"sftpOptions": {
"excludes": [],
"flat": false,
"clear": false,
"override": false,
"ignoreHidden": true,
"beforeRunCommand": "",
"afterRunCommand": ""
}
}
暂无
如果使用
pnpm
安装依赖,使用@vercel/ncc
可以正常打包,
但是如果改为rollup
打包的话就会报错,必须使用npm
安装依赖才行
经过排查是依赖ssh2
引起的,错误信息为
E:\WorkSpace\wink-sftp\dist\src\index.js → dist/index.js...
[!] RollupError: Could not resolve "../build/Release/cpufeatures.node" from "../build/Release/cpufeatures.node?commonjs-external"
../build/Release/cpufeatures.node?commonjs-external
at error (E:\WorkSpace\wink-sftp\node_modules\.pnpm\rollup@3.23.0\node_modules\rollup\dist\shared\rollup.js:278:30)
at ModuleLoader.handleInvalidResolvedId (E:\WorkSpace\wink-sftp\node_modules\.pnpm\rollup@3.23.0\node_modules\rollup\dist\shared\rollup.js:24485:24)
at E:\WorkSpace\wink-sftp\node_modules\.pnpm\rollup@3.23.0\node_modules\rollup\dist\shared\rollup.js:24447:26
at process.processTicksAndRejections (node:internal/process/task_queues:95:5)
XWINK
欢迎大家随时点击这里为我提供贡献、问题和功能建议
如果觉得项目对你有帮助,就帮我点个小星星吧~ ⭐️
FAQs
远程部署SFTP工具
We found that @xwink/sftp demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Socket uncovered npm malware campaign mimicking popular Node.js libraries and packages from other ecosystems; packages steal data and execute remote code.
Research
Socket's research uncovers three dangerous Go modules that contain obfuscated disk-wiping malware, threatening complete data loss.
Research
Socket uncovers malicious packages on PyPI using Gmail's SMTP protocol for command and control (C2) to exfiltrate data and execute commands.