Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
gulp-awspublish
Advanced tools
awspublish plugin for gulp
First, install gulp-awspublish
as a development dependency:
npm install --save-dev gulp-awspublish
Then, add it to your gulpfile.js
:
var es = require('event-stream'),
awspublish = require('gulp-awspublish'),
publisher = awspublish({ key: '...', secret: '...', bucket: '...'}),
headers = { 'Cache-Control': 'max-age=315360000, no-transform, public' };
// publish all js files
// Cache-Control headers will be added on top of other headers
var js = gulp.src('./public/*.js')
.pipe(publisher.publish(headers));
// gzip and publish all js files
// Content-Encoding headers will be added on top of other headers
var jsgz = gulp.src('./public/*.js')
.pipe(awspublish.gzip())
.pipe(publisher.publish(headers));
// sync content of s3 bucket with published files
// print progress with reportr
publisher
.sync(es.merge(js, jsgz))
.pipe(publisher.reporter());
create a gzip through stream, that gzip files and add Content-Encoding headers
Create a Publisher Options are passed to knox to create a s3 client
create a through stream, that push files to s3. Publish take a header hash as argument to override or add other s3 headers.
Files that get out of the stream get extra properties s3.path: s3 path of this file s3.state: publish state (add, update or skip) s3.headers: s3 headers for this file
Defaults headers are
Take a stream of files and sync the content of the s3 bucket with these files. It return a readable stream with both input files and deleted files deleted file will have s3.state set to delete
create a reporter that logs to console each file state (delete, add, update, skip) and s3 path
0.0.1 / 2014-02-03
FAQs
gulp plugin to publish files to amazon s3
The npm package gulp-awspublish receives a total of 21,424 weekly downloads. As such, gulp-awspublish popularity was classified as popular.
We found that gulp-awspublish demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 4 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.