
Research
/Security News
Toptal’s GitHub Organization Hijacked: 10 Malicious Packages Published
Threat actors hijacked Toptal’s GitHub org, publishing npm packages with malicious payloads that steal tokens and attempt to wipe victim systems.
GSCILP - Google Search Console Indexing Link Publisher - is a tool to automatically or semi-automatically updating your URLs in search console using Google API
GSCILP - Google Search Console Indexing Link Publisher - is a tool to automatically or semi-automatically updating your URLs in search console using Google API.
Before use make sure you understand how Google API quota works. You can find limits here. To apply for more quota go to Google Cloud Console > APIs & Services > Web Search Indexing API > Quotas & System Limits choose needed quota nad click "EDIT QUOTAS"
Note: this package need access to scopes:
'https://www.googleapis.com/auth/webmasters'
'https://www.googleapis.com/auth/webmasters.readonly'
'https://www.googleapis.com/auth/indexing'
First of all you will need to create a Service Account Key:
Note: Only a verified owner of the property can perform this step.
thanks @fusebit for this instruction. Origin repo
import { GSCILP } from 'gscilp';
const gscilpSitemap = new GSCILP({
googleKeyPath: '/path/to/key/file.json',
sitemapPath: '../sitemap.xml'
});
// OR
const gscilpLinks = new GSCILP({
googleKeyPath: '/path/to/key/file.json',
linksToUpdate: ['link1', 'link2', ..., 'link-n']
});
gscilpSitemap.sendLinks();
gscilpLinks.sendLinks();
This examples will update up to 200 links by default from sitemap (1 option) or from array of links (2 ooption).
Note: you can provide only one link source (sitemap or array), if provided both will used sitemap.
const config: IConfig = {
googleKeyPath: '/path/to/key/file.json', // path to your key
linksPerDayLimit: 200, //default 200 link per day - it's a default Google quota
delayPerRequest: 0, //default 0 in ms - can be set to avoid 600 rpm Google quota
sitemapPath: '/path/to/key/file.xml', // if provided will parse sitemap and convert it to links array
// or
linksToUpdate: ['link1', 'link2', ..., 'link-n'], //can provide regular array of links to update them
}
After initialization you will have access to this list of methods:
// will parse provided sitemap and save it in gscilp.linksToUpdate property.
// No need to call - will be called in init
gscilp.parseSitemap()
// will init google instanse with provided key and save it in gscilp.googleInstance
// No need to call will be checked before sending
gscilp.initGoogle()
// Optional method to ensure you have access to right account.
// Will show in console for what resources this key have access
gscilp.checkWebsitesList()
// Method will call before sending links.
// And will remove bad links from gscilp.linksToUpdate
gscilp.validateLinks()
// If provided more than linksPerDayLimit (default 200) will cut all extra links
// Called before sending links
gscilp.cutExtraLinks()
// Optional method. Needed to avoid reaching rpm quota.
// if provided config.delayPerRequest !== 0 in ms
// for each request will be delay
gscilp.delay()
// Will send links to google api from gscilp.linksToUpdate
gscilp.sendLinks()
Future plans to implement cron job for big sitemaps (more than 200 links) and local storage. So you can run it and it will update all links from sitemap in some amount of days Feel fre to contribute and create issues.
If you want to help - it will be great to implement a good logger :)
FAQs
GSCILP - Google Search Console Indexing Link Publisher - is a tool to automatically or semi-automatically updating your URLs in search console using Google API
The npm package gscilp receives a total of 0 weekly downloads. As such, gscilp popularity was classified as not popular.
We found that gscilp demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
/Security News
Threat actors hijacked Toptal’s GitHub org, publishing npm packages with malicious payloads that steal tokens and attempt to wipe victim systems.
Research
/Security News
Socket researchers investigate 4 malicious npm and PyPI packages with 56,000+ downloads that install surveillance malware.
Security News
The ongoing npm phishing campaign escalates as attackers hijack the popular 'is' package, embedding malware in multiple versions.