Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Giffer is an automatic gif download bot and is highly customizable. It's core functionality only consists of being able to start different adapters and downloading gifs that were found by these adapters. It also saves some meta information and makes sure that gifs with the same url are not downloaded multiple times.
new Giffer(args)
There are some args you must/can provide when creating a new giffer client:
db
: A levelup
instance. Important: Must have valueEncoding: "json"
timeToRestart
: Time in ms after which an adapter should be started again after it has finishedadapters
: An array of adapters. See list of adaptersoutputDir
: Where the files should be downloaded tovar levelup = require('levelup')
var GifferAdapter9Gag = require('giffer-adapter-9gag')
var Giffer = require('giffer')
var db = levelup('/whatever', {
db: require('memdown'),
valueEncoding: 'json'
})
var adapter9gag = new GifferAdapter9Gag({})
var giffer = new Giffer({
db: db,
outputDir: __dirname + '/images',
adapters: [adapter9gag]
})
start()
Start up the whole engine!
stop()
Shut down the whole engine.
plugin(plugin[, args])
Easy way to use a plugin.
giffer.plugin(require('giffer-validator'))
Giffer emits only one event:
gif
When a gif was downloaded. As a parameter you get the filename.
Writing plugins is pretty straight forward. It offers hooks on some methods and
your plugin can register on either pre
or post
events on these methods.
These are methods that can be hooked into:
handleGif
This is the first method that is being called when an adapter emits a new gif
event. Checks if the gif was already downloaded and - if not - saves the data
into the database.
download
Does what it says. Actually downloads the gif into the predefined folder.
emitGif
This is the method that emits the gif
event after everything has been done
properly.
FAQs
GIF download bot
The npm package giffer receives a total of 4 weekly downloads. As such, giffer popularity was classified as not popular.
We found that giffer demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.