
Research
/Security News
9 Malicious NuGet Packages Deliver Time-Delayed Destructive Payloads
Socket researchers discovered nine malicious NuGet packages that use time-delayed payloads to crash applications and corrupt industrial control systems.
A comprehensive command-line interface (CLI) tool to download, process, and manage bioRxiv MECA (Manuscript Exchange Common Approach) files from AWS S3 for text and data mining purposes.
--requester-pays)npm install -g biorxiv
Get a summary of a bioRxiv/medRxiv preprint from a URL or DOI.
Arguments:
<url-or-doi>: bioRxiv URL or DOI to summarizeOptions:
-m, --more: Show additional details and full abstract-s, --server <server>: Specify server (biorxiv or medrxiv)Examples:
biorxiv summary "10.1101/2024.05.08.593085"
biorxiv summary -m "10.1101/2024.05.08.593085"
biorxiv summary -s medrxiv "10.1101/2020.03.19.20039131" --more
Download MECA files from the bioRxiv/medRxiv S3 buckets by DOI.
Arguments:
<doi>: DOI of the paper (e.g., "10.1101/2024.05.08.593085")Options:
-o, --output <dir>: Output directory for downloaded files (default: "./downloads")-a, --api-url <url>: API base URL--requester-pays: Enable requester-pays for S3 bucket accessExamples:
biorxiv --requester-pays download "10.1101/2024.05.08.593085"
biorxiv --requester-pays download "10.1101/2024.05.08.593085" --output "./papers"
biorxiv --requester-pays download "10.1101/2024.05.08.593085" --api-url "https://custom-api.com"
List available content in the bioRxiv or medRxiv S3 bucket.
Options:
-m, --month <month>: Filter by specific month (e.g., "2024-01" or "January_2024")-b, --batch <batch>: Filter by specific batch (e.g., "Batch_01")-l, --limit <number>: Limit the number of results (default: 50)-s, --server <server>: Server to use: "biorxiv" or "medrxiv"Examples:
# Local development
biorxiv list
biorxiv list --month "2024-01"
biorxiv list --batch 1 --limit 100 --server medrxiv
List detailed metadata for all files in a specific month or batch.
Options:
-m, --month <month>: Month to list (e.g., "January_2024" or "2024-01")-b, --batch <batch>: Batch to list (e.g., "1", "batch-1", "Batch_01")-s, --server <server>: Server to use: "biorxiv" or "medrxiv"Examples:
biorxiv batch-info --month "2024-01"
biorxiv batch-info --batch "1"
biorxiv batch-info --server medrxiv --month "2024-01"
--requester-paysEnable requester pays functionality. The S3 buckets require requester pays for external access.
Batch process MECA files for a given month or batch.
Options:
Time Selection:
-m, --month <month>: Month(s) to process. Supports: YYYY-MM, comma-separated list, or wildcard patterns-b, --batch <batch>: Batch to process. Supports: single batch, range, or comma-separated listProcessing Control:
-l, --limit <number>: Maximum number of files to process-c, --concurrency <number>: Number of files to process concurrently (default: 1)--force: Force reprocessing of existing files--dry-run: List files without processing themOutput Control:
-o, --output <dir>: Output directory for extracted files (default: "./batch-extracted")--keep: Keep MECA files after processing--full-extract: Extract entire MECA file instead of selective extraction--max-file-size <size>: Skip files larger than this size (e.g. 1GB)API Configuration:
-a, --api-url <url>: API base URL (default: "https://biorxiv.csf.now")-k, --api-key <key>: API key for authentication (or use OPENRXIV_BATCH_PROCESSING_API_KEY env var)-s, --server <server>: Server type: biorxiv or medrxivExamples:
# Process specific month
biorxiv batch-process --month "2025-08" --requester-pays
# Process multiple months
biorxiv batch-process --month "2024-01,2024-02,2024-03" --requester-pays
# Dry run to see what would be processed
biorxiv batch-process --month "2025-08" --dry-run
# Process all of 2025
biorxiv batch-process --month "2025-*" --requester-pays
# Process with concurrency
biorxiv batch-process --month "2025-08" --concurrency 5 --requester-pays
The tool reads AWS credentials from the home directory under the default profile, if available.
You can also set credentials via environment variables:
export OPENRXIV_BATCH_PROCESSING_API_KEY="your-api-key"
export AWS_ACCESS_KEY_ID="your-access-key"
export AWS_SECRET_ACCESS_KEY="your-secret-key"
git clone https://github.com/continuous-foundation/biorxiv
cd biorxiv
npm install
npm run build
npm test
npm run test:watch
npm run lint
npm run lint:format
MIT License - see LICENSE file for details.
This tool is designed to comply with bioRxiv's and medRxiv's fair use policies:
FAQs
CLI tool to download openRxiv MECA files from AWS S3 for text and data mining
The npm package biorxiv receives a total of 1 weekly downloads. As such, biorxiv popularity was classified as not popular.
We found that biorxiv demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
Socket researchers discovered nine malicious NuGet packages that use time-delayed payloads to crash applications and corrupt industrial control systems.

Security News
Socket CTO Ahmad Nassri discusses why supply chain attacks now target developer machines and what AI means for the future of enterprise security.

Security News
Learn the essential steps every developer should take to stay secure on npm and reduce exposure to supply chain attacks.