
Research
/Security News
Malicious npm Packages Target WhatsApp Developers with Remote Kill Switch
Two npm packages masquerading as WhatsApp developer libraries include a kill switch that deletes all files if the phone number isn’t whitelisted.
create-ssl-certificate
Advanced tools
Command line tool to create self signed SSL certificate
Based on the following amazing GIST.
NOTE!
This only works on MAC!
Requires Node version 8 or higher
In the folder of your project use the NPM executer:
npx create-ssl-certificate
This will create a certificate for the domain: FOLDER_NAME.test and any subdomain.
npx create-ssl-certificate --hostname myproject
This will create a certificate for the domain: myproject.test and any subdomain.
npx create-ssl-certificate --hostname myproject --domain localhost
This will create a certificate for the domain: myproject.test and any subdomain. Only test
and localhost
are recommended because they are specifically reserved as special-use domains.
You choose either 1. or 2.
This setup only works for the specific hostname and no subdomains. Add the following, where you replace hostname and top level domin name to your own configuration:
127.0.0.1 myproject.test
to your /etc/hosts
file.
You can do a "one time" setup, which works on all hostnames for the given top level domain, etc. .test
. A good solution is dnsmasq. Install it via homebrew.
brew install dnsmasq
To make it start when your mac boots up:
brew services start dnsmasq
To route all top level domain lookups to localhost you will have to run these commands.
Replace test
in both echo commands if you chose a different top level domain.
mkdir -pv $(brew --prefix)/etc
sudo cp -v $(brew --prefix dnsmasq)/homebrew.mxcl.dnsmasq.plist /Library/LaunchDaemons
sudo launchctl load -w /Library/LaunchDaemons/homebrew.mxcl.dnsmasq.plist
sudo mkdir -pv /etc/resolver
echo "address=/.test/127.0.0.1" | sudo tee -a $(brew --prefix)/etc/dnsmasq.conf
echo "nameserver 127.0.0.1" | sudo tee /etc/resolver/test
You usually have to restart your computer for this to take proper effect.
FAQs
Command line tool to create self signed SSL certificate
The npm package create-ssl-certificate receives a total of 13 weekly downloads. As such, create-ssl-certificate popularity was classified as not popular.
We found that create-ssl-certificate demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
/Security News
Two npm packages masquerading as WhatsApp developer libraries include a kill switch that deletes all files if the phone number isn’t whitelisted.
Research
/Security News
Socket uncovered 11 malicious Go packages using obfuscated loaders to fetch and execute second-stage payloads via C2 domains.
Security News
TC39 advances 11 JavaScript proposals, with two moving to Stage 4, bringing better math, binary APIs, and more features one step closer to the ECMAScript spec.