Research
Security News
Malicious npm Package Targets Solana Developers and Hijacks Funds
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
filename-temp-track
Advanced tools
Keeps track of filenames, saved in a temporary folder, and automatically cleans up by default in an hour
Useful when receiving files being uploaded, or downloaded, that needs to be cleaned up after some time or when the process exits
npm install filename-temp-track
or
yarn filename-temp-track
Tracks a filename, under a temporary folder, and deletes it after an hour, by default.
filename
: string with the file name. If inDirectory is false, this is the full path of the file to track.
It can also be an object with all the same properties as the method signature (see second example below)cleanuptimeout
: number in ms after which to delete the fileinDirectory
: boolean (default true)Example 1:
// Tracks for a filename, using the default timeout of an hour
ft.track('filename.xls')
.then(function(pathName){ // pathName should be /tmp/sometemp/filename.xls});
Example 2:
// Tracks for a filename, using a custom timeout of a minute
ft.track({filename: 'filename.xls', cleanupTimeout: 1000 * 60})
.then(function(pathName){ // pathName should be /tmp/sometemp/filename.xls});
Cleans up the pathname
pathname
: is the full path name of the file to cleaned upCleans up the pathname (sync version)
pathname
: is the full path name of the file to cleaned upCleans up all the files being controlled by this module
Cleans up all the files being controlled by this module (sync version)
Returns the array of files being tracked
inDirectory
optional parameterMIT - Copyright (c) 2017, 2019 - Luis Lobo Borobia luislobo@gmail.com
FAQs
File name tracking in temporary directory and auto clean up
The npm package filename-temp-track receives a total of 0 weekly downloads. As such, filename-temp-track popularity was classified as not popular.
We found that filename-temp-track demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
Security News
Research
Socket researchers have discovered malicious npm packages targeting crypto developers, stealing credentials and wallet data using spyware delivered through typosquats of popular cryptographic libraries.
Security News
Socket's package search now displays weekly downloads for npm packages, helping developers quickly assess popularity and make more informed decisions.