
Research
/Security News
Malicious npm Packages Target WhatsApp Developers with Remote Kill Switch
Two npm packages masquerading as WhatsApp developer libraries include a kill switch that deletes all files if the phone number isn’t whitelisted.
curious-cli
Advanced tools
Curious is a tiny library for asking for user input without the hassle of opening readline and avoids callback hell by asking for input declaratively.
npm install curious-cli
const semver = require('semver')
let config = await curious.askObject({
name: {
description: "Name",
required: true,
validate: (val) => val.match(/[a-z0-9-]+/) != -1
},
version: {
description: "Version",
defaultValue: "1.0.0",
validate: semver.valid
},
desription: {
description: "Description"
},
repository: {
description: "Repository",
}
})
Terminal output:
Name:
Description:
Version [1.0.0]:
Repository:
Result:
{ name: "foobar",
description: "Foobar is the most awesome package you will ever see.",
version: "1.0.0",
repository: "http://github.com/foobarjs/foobar" }
let urls = await curious.askList("Enter a URL: ", {
value: {
required: true
},
terminator: '.' // implicit
})
console.log(urls)
All functions return a promise that resolves to the validated value the user entered.
Let the user pick an element out of the given array, using the optionally specified prettyfier to pretty-print the elements.
Ask the user for a single primitive value. definition
is an object with the following attributes:
Ask the user for a JavaScript object. The description
is an object mapping keys to type definitions as seen in curious.askValue
.
Ask the user for several values of the same type.
:warning: This method is currently not working as described.
.
curious.askValue
.Confirm a certain action, with question
being the text that is displayed. A boolean value indicates if the user confirmed (true) or unconfirmed (false).
If you found a bug or want an extra feature please open an issue on GitHub.
FAQs
Ask user for input from the command-line declaratively
The npm package curious-cli receives a total of 1 weekly downloads. As such, curious-cli popularity was classified as not popular.
We found that curious-cli demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
/Security News
Two npm packages masquerading as WhatsApp developer libraries include a kill switch that deletes all files if the phone number isn’t whitelisted.
Research
/Security News
Socket uncovered 11 malicious Go packages using obfuscated loaders to fetch and execute second-stage payloads via C2 domains.
Security News
TC39 advances 11 JavaScript proposals, with two moving to Stage 4, bringing better math, binary APIs, and more features one step closer to the ECMAScript spec.