
Research
/Security News
Weaponizing Discord for Command and Control Across npm, PyPI, and RubyGems.org
Socket researchers uncover how threat actors weaponize Discord across the npm, PyPI, and RubyGems ecosystems to exfiltrate sensitive data.
Simple CLI HTTP tools aimed at maximum human friendliness.
$ npm i -g aqui
Uses @buzuli/color
, so its configuration options can be applied to optimize for your terminal.
HTTP GET requet
$ aqui get http://httpbin.org/get?agent=aqui -h bearer:none
{
"args": {
"agent": "aqui"
},
"headers": {
"Accept": "application/json, text/plain, */*",
"Bearer": "none",
"Connection": "close",
"Host": "httpbin.org",
"User-Agent": "aqui/3.0.2"
},
"origin": "52.34.191.12",
"url": "http://httpbin.org/get?agent=aqui"
}
access-control-allow-credentials : true
access-control-allow-origin : *
connection : close
content-length : 233
content-type : application/json
date : Tue, 15 May 2018 13:18:38 GMT
server : gunicorn/19.8.1
via : 1.1 vegur
GET http://httpbin.org/get?agent=aqui
Accept : application/json, text/plain, */*
Connection : close
Host : httpbin.org
User-Agent : aqui/3.0.3
bearer : none
[200] OK (597.562 ms)
Geo IP query
$ aqui ip -gJ
{
"ip": "52.34.191.12",
"as": "AS16509 Amazon.com, Inc.",
"isp": "Amazon.com",
"org": "Amazon.com",
"countryCode": "US",
"countryName": "United States",
"regionCode": "OR",
"regionName": "Oregon",
"city": "Boardman",
"zipCode": "97818",
"metroCode": "unknown",
"timeZone": "America/Los_Angeles",
"latitude": 45.8696,
"longitude": -119.688
}
$ aqui <command>
Commands:
aqui delete <url> [payload] HTTP DELETE against a URL
aqui get <url> HTTP GET against a URL
aqui head <url> HTTP HEAD against a URL
aqui ip Fetch public IP info for this caller
aqui options <url> HTTP OPTIONS against a URL
aqui patch <url> [payload] HTTP PATCH against a URL
aqui post <url> [payload] HTTP POST against a URL
aqui put <url> [payload] HTTP PUT against a URL
aqui status-codes [filter] list the http status codes
Options:
--version Show version number [boolean]
--help Show help [boolean]
FAQs
Simple CLI HTTP utilities
The npm package aqui receives a total of 2,820 weekly downloads. As such, aqui popularity was classified as popular.
We found that aqui demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
/Security News
Socket researchers uncover how threat actors weaponize Discord across the npm, PyPI, and RubyGems ecosystems to exfiltrate sensitive data.
Security News
Socket now integrates with Bun 1.3’s Security Scanner API to block risky packages at install time and enforce your organization’s policies in local dev and CI.
Research
The Socket Threat Research Team is tracking weekly intrusions into the npm registry that follow a repeatable adversarial playbook used by North Korean state-sponsored actors.