
Security News
/Research
Wallet-Draining npm Package Impersonates Nodemailer to Hijack Crypto Transactions
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
Live remote copy-pasta explorer for code training sessions
Long code workshops (like a few days) can rapidly turn into hell for trainees.
The sessions rhythm is usually quite high and attendees often have a hard time to follow oral instructions and advices, watch demos on the main screen and keep coding their projects simultaneously.
After only a few hours, the frustration is quite painful: people tend to give up because their project gets broken and they can't follow anymore despite the repeated help of the teacher.
copycast was created to fix this situation.
copycast = file system watcher + websocket server + reactive webclient
.git
folder is found, you can git pull http://{HOST}:{PORT}/project.git
npm i -g copycast
copycast -d YOUR_DIR -p YOUR_PORT
Open localhost:YOUR_PORT
in a web browser
-d
: default to .
-p
: default to 42000
-l [subdomain]
: to enable localtunnel if you need a public URL, default to false-G
: disable Git supportNote: if you open a localtunnel, the subdomain will be automatically stored in a local .copycast
file and will be requested next time so that URL won't change between sessions.
To start the server and build the client:
npm i
npm run watch
To print debug
logs:
DEBUG=watcher,socket npm run start
Made by the ByteClub
ISC
FAQs
Live remote copy-pasta explorer for training sessions
The npm package copycast receives a total of 2 weekly downloads. As such, copycast popularity was classified as not popular.
We found that copycast demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
/Research
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
Security News
This episode explores the hard problem of reachability analysis, from static analysis limits to handling dynamic languages and massive dependency trees.
Security News
/Research
Malicious Nx npm versions stole secrets and wallet info using AI CLI tools; Socket’s AI scanner detected the supply chain attack and flagged the malware.