Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
[![Greenkeeper badge](https://badges.greenkeeper.io/FireBlinkLTD/fbl.svg)](https://greenkeeper.io/) [![CircleCI](https://circleci.com/gh/FireBlinkLTD/fbl.svg?style=svg)](https://circleci.com/gh/FireBlinkLTD/fbl) [![codecov](https://codecov.io/gh/FireBlink
This project is early in development and not recommended to even look at before version 0.1.0.
This is a second reincarnation on internal tool that FireBlink LTD used to deploy its own projects. Original tool was vendor locked and had pretty much limited functionality.
The new one, README of which you're currently reading is redesigned from scratch to fix that limitation. Even more, due to plugin nature it can process any kind of flows, even non related to deployments.
FBL generally designed to help with automation related tasks that require flexible control over the flow.
Flexibility is the key concept of the FBL, so it can be used either as a command line tool, or integrated into any existing Node.js app.
Just run npm i -g fbl
to install the CLI.
# [Optional] flow version, it is up to the user whether to use it or not
version: 1.0.0
# [Optional] flow description, it is up to the user whether to describe a flow in a human readable way
description: |-
Sample file to describe all kinds of possibilities fbl can provide inside the descriptor
# [Required] The starting point of the flow.
pipeline:
# Pipeline may only have one key that represents action handler ID or one of its aliases
# value is action handler specific, make sure to read corresponding documentation first
'plugin.id': 'plugin.options'
FAQs
CLI tool to manage routine automation tasks.
The npm package fbl receives a total of 66 weekly downloads. As such, fbl popularity was classified as not popular.
We found that fbl demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.