
Research
Malicious fezbox npm Package Steals Browser Passwords from Cookies via Innovative QR Code Steganographic Technique
A malicious package uses a QR code as steganography in an innovative technique.
CLI to find and execute command for every glob match
Elegant replacement for each-cli
,
foreach-cli
and *nix
find -exec
command in
very little lines of
code. Useful for NPM
scripts or CI.
$ npm i -g findx-cli
$ findx '**/*.jpg' -- convert {{path}} {{dir}}/{{name}}.png
This searches for all files matching the glob pattern, then runs the provided command against each match.
See below for more usage examples.
Usage: findx <globs> [options] -- [commands...]
CLI to find and execute command for every glob match
Arguments:
globs globs to match
commands commands to execute
Options:
-C, --concurrent <max> concurrent number of executions (default: 10)
--log <level> log level (choices: "stdout", "stderr", "all",
"none", default: "all")
--sh run each execution in new shell
--cd change to path directory for each run
-V, --version output the version number
-h, --help display help for command
Write your command using mustache syntax. The following tags are exposed:
Tag | Eg | Desc |
---|---|---|
{{path}} | /home/user/dir/file.txt | Full path of file |
{{root}} | / | Root |
{{dir}} | /home/user/dir | Directory portion |
{{base}} | file.txt | File name with extension |
{{name}} | file | Name portion |
{{ext}} | .txt | Extension portion |
$ findx '**/*.tar' --cd -- tar -xvf {{base}}
$ findx '**/LICENSE !ignored/**' --sh -- 'cd {{dir}} && cat LICENSE'
$ findx '**/*.{txt,xml}'
Standard Github contribution workflow applies.
Test specs are in test/spec.js
. To run the tests:
$ npm run test
ISC
FAQs
CLI to find and execute command for every glob match
The npm package findx-cli receives a total of 61 weekly downloads. As such, findx-cli popularity was classified as not popular.
We found that findx-cli demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
A malicious package uses a QR code as steganography in an innovative technique.
Research
/Security News
Socket identified 80 fake candidates targeting engineering roles, including suspected North Korean operators, exposing the new reality of hiring as a security function.
Application Security
/Research
/Security News
Socket detected multiple compromised CrowdStrike npm packages, continuing the "Shai-Hulud" supply chain attack that has now impacted nearly 500 packages.