Research
/Security News
11 Malicious Go Packages Distribute Obfuscated Remote Payloads
Socket uncovered 11 malicious Go packages using obfuscated loaders to fetch and execute second-stage payloads via C2 domains.
By Olivia Brown - Aug 06, 2025
You're Invited:Meet the Socket Team at BlackHat and DEF CON in Las Vegas, Aug 4-6.RSVP →
介绍 | Introduction
支持 yarn、pnpm、npm、bun
安装 | Install
npm install -g ccommand # 安装ccommand install ccommand
指令 ｜ Command
ccommand -v # 查看版本 view version
ccommand find # 查找workspace find workspace
ccommand # 执行当前script Execute the current script
ccommand -help # 查看帮助 view help
语言 ｜ Language
# 导出环境变量在你的bash或者zsh中 Export environment variables in your bash or zsh
# 中文 Chinese
export PI_Lang=zh
# 英文 English
export PI_Lang=zh
新特性 ｜ Feature
when you run command with search the quick command will be output with tips 当你使用命令通过查找执行, 会在终端输出一个快速执行命令的提示
使用 | Usage
- ccommand 选取当前目录下的 package.json 文件中的 scripts 中的命令
- ccommand playground 选取当前目录下的 playground 文件夹下的 package.json 文件中的 scripts 中的命令
- ccommand playground -silent 支持额外的参数传参
License
FAQs
ccommand
We found that ccommand demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Package last updated on 19 Jun 2025
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Related posts
Security News
TC39 Advances 11 Proposals for Math Precision, Binary APIs, and More
TC39 advances 11 JavaScript proposals, with two moving to Stage 4, bringing better math, binary APIs, and more features one step closer to the ECMAScript spec.
By Sarah Gooding - Aug 06, 2025
Research
/Security News
Critical Vulnerability in NestJS Devtools: Localhost RCE via Sandbox Escape
A flawed sandbox in @nestjs/devtools-integration lets attackers run code on your machine via CSRF, leading to full Remote Code Execution (RCE).
By Jonathan Leitschuh - Aug 01, 2025