
Research
Malicious npm Packages Impersonate Flashbots SDKs, Targeting Ethereum Wallet Credentials
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
cert2secret
Advanced tools
Easily generate a Kubernetes TLS secret manifest from a TLS key/certificate pair.
Use case: you want to secure an Ingress specifying a secret containing the TLS key/cert pair.
NOTE: If your goal it's just to create a tls secret in a cluster you can use
kubectl
instead.
kubectl create secret tls ${CERT_NAME} --key ${KEY_FILE} --cert ${CERT_FILE}
npm install -g cert2secret
Usage: cert2secret [options]
Options:
-V, --version output the version number
-k, --key <key file> you must specify a TLS key file
-c, --cert <certificate file> you must specify a TLS certificate file
-d --dest <destination> destination for the generated yaml manifest
--secretname <secretname> the name of your certificate used in the secret metadata
--namespace <namespace> the namespace for your certificate manifest
-h, --help output usage information
cert2secret -k your-certificate.key -c your-certificate.crt -d ./certificate-manifest.yaml
The command above will generate a file called certificate-manifest.yml
with the following content:
apiVersion: v1
kind: Secret
type: kubernetes.io/tls
metadata:
namespace: default
data:
tls.crt: >-
...base64 encoded certificate data
tls.key: >-
...base64 encoded key data
FAQs
Turn your TLS certificates into a Kubernetes TLS secret manifest.
The npm package cert2secret receives a total of 0 weekly downloads. As such, cert2secret popularity was classified as not popular.
We found that cert2secret demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
Security News
Ruby maintainers from Bundler and rbenv teams are building rv to bring Python uv's speed and unified tooling approach to Ruby development.
Security News
Following last week’s supply chain attack, Nx published findings on the GitHub Actions exploit and moved npm publishing to Trusted Publishers.