Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
gmail-safe
Advanced tools
First, be sure to install node and redis. Once that's done:
$ npm install -g gmail-safe
$ gmail_safe ./download/directory -u USERNAME -p PASSWORD --incremental
The specified directory will be created with the 0770
permission code if it does not already exist, and the database will be initialized if it does not yet exist.
gmail_safe was inspired by a desire to back up my Google Mail. I surveyed some of the options already available but could find none that met all my criteria:
cron
script)gmail_safe does all that, and it does it fast (I get about 20 emails per second) and without using much CPU or RAM. Perfect for a cron job.
It achieves that speed using a local redis
database to store metadata like conversations and labels, while storing emails in the common format to flat files, one per email. At the moment, the metadata isn't used by anything, but I plan on implementing some sort of export utility at some point. If you have a use case for exporting this metadata (perhaps to re-import your emails to Google Mail or a similar service) let me know and I'll build it for you!
Currently gmail_safe
has two external dependencies you will need to install yourself:
If there is much demand I will probably make available a more complete guide for installing these dependencies - but really, it isn't very hard.
From there, just follow the quick start guide.
Note: be sure to install gmail_safe
using npm install -g gmail-safe
- without the -g (which tells npm to install the gmail_safe executable globally) or the environment will break and gmail_safe
will not function. If you know why, please file an issue to help point me in the right direction.
Q: Help! I accidentally deleted a file / broke the database / etc.!
A: No problem! First, delete the meta
folder from within the download
directory. Then, re-run gmail_safe
. It should fix itself just fine,
although you may need to delete the emails too just to be sure. Your
call.
Q: How can I run gmail_safe
from a cron job?
A: gmail_safe
can be very easily stored as a cron job using the -i
and
-c FILE
options, as well as redirecting the output to /dev/null. (Better
logging is a planned feature.) Writing the cron job is beyond the scope
of this README, but it isn't hard to do. Here is an example config file:
{
"username": "your_username@gmail.com",
"password": "your_password_OR_app_specific_passphrase"
}
Most of these features are fairly simple to implement - mostly I just need motivation. So if you want this feature (or any other!) just file an issue on github.
This project is Copyright (c) 2012 Erich Blume <blume.erich@gmail.com>.
Google and Google Mail are trademarks owned by Google. I am not Google. I do not own these trademarks. Hopefully everyone understands that this modest little app only serves to increase Google Mail's adoption, by whatever small amount.
This project is licensed under the MIT license, which is a permissive open-source license. See the LICENSE file for the full terms of the licensing. If this project didn't come with a LICENSE file, then someone messed up (probably me) and you can get a copy at http://www.opensource.org/licenses/mit-license.php.
FAQs
Intelligent backup client for GMail.
The npm package gmail-safe receives a total of 1 weekly downloads. As such, gmail-safe popularity was classified as not popular.
We found that gmail-safe demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.