
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
在HOME目录下新建一个.cos.json的文件内容如下:
{
"appId": "your app id",
"secretId": "your secret id",
"secretKey": "your secret key",
"bucket": "your bucket"
}
然后安装cos-cli:npm i -g cos-cli
执行一下命令:
# 查看帮助
cos -h
# 查看版本号
cos -V
# 查看上传帮助
cos upload -h
# 上传文件
cos upload hello.txt
# 上传文件,指定服务器端的文件名
cos upload hello.txt --path /hello.log
# 上传文件,覆盖同名的文件
cos upload hello.txt --path /hello.log --overwrite
# 上传文件,上传完成后删除本地文件
cos upload hello.txt --path /hello.log --delete
# 删除cdn上的文件
cos rm /hello.lg
# 删除cdn上的文件夹
cos rm /dir/
# 查看目录下文件
cos ls /path/
FAQs
cos-cli
We found that cos-cli demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.