Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
code-live-instructor
Advanced tools
A tool that allows live syncing from an instructor's code project to a student's computer. Must be paired with code-live-student.
code-live is a tool used to help instructors live sync their code with their students. These live syncing files can be used to compare to the student's code and help prevent bugs/errors.
code-live will run a server in the background and watch the files in the directory that the command was executed. Any file or folder created, changed, moved or deleted will be synced with anyone who has connected to your code-live server.
This package only works when paired with code-live-student
.
Using npm:
npm i -g code-live-instructor
Navigate to the directory that will hold the code files and folders that you want to be synced and run:
code-live-start
The code-live server will start running in the background on port 5050 and will emit any changes. Immediately, you will see [student-command]: code-live *your ip address*
. This is the command that the students need to run to connect to your server.
When someone connects to your code-live server, it will notify you in the terminal of the connection by printing connected: [socket id of the connection]
.
file [filepath]
will sync an individual file to all student connections. Example: file ./functions.js
all
will sync all folders and files with students.end
will close all student connections to your server.command
will give you the student command to connect to your server.help
will display all the above commands in the terminal.FAQs
A tool that allows live syncing from an instructor's code project to a student's computer. Must be paired with code-live-student.
We found that code-live-instructor demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.