
Security News
Axios Supply Chain Attack Reaches OpenAI macOS Signing Pipeline, Forces Certificate Rotation
OpenAI rotated macOS signing certificates after a malicious Axios package reached its CI pipeline in a broader software supply chain attack.
Performs AWS Signature Version 4-signed HTTP requests from the command line.
Performs AWS Signature Version 4-signed HTTP requests from the command line.
Inspired by the awesome HTTPie.
npm i -g http-aws4
Perform a GET on your AWS Elasticsearch index called blog:
haws https://search-....us-east-1.es.amazonaws.com/blog
Delete the blog index:
haws delete https://search-....us-east-1.es.amazonaws.com/blog
Controls which parts of the request are output. Allowed flags:
| Flag | Meaning |
|---|---|
H | Request headers |
B | Request body |
h | Response headers |
b | Response body |
For example, -p Hhb would print the request headers, the response headers, and
the response body.
The default value is hb (response headers and response body), except for
redirected output, where it is b (response body).
Controls pretty-printing of the response body. Allowed values:
| Value | Meaning |
|---|---|
all | Both colors and formatting |
colors | Just colors |
format | Just formatting |
none | Raw |
The default value is all, except for redirected output, where it is none.
If the name of the AWS region cannot be detected from the URL, use this option to set it manually.
If the name of the AWS service cannot be detected from the URL, use this option to set it manually.
Uses the specified profile. Note that setting this option will force reading credentials from the credentials file rather than from the environment.
If you prefer not to colorize the output at all, pass this option, provided by supports-color.
Request headers can be specified after the URL as a space-separated list of
name-value pairs, separated by a colon character. For example, this command
would set the X-Foo header to bar, and the X-Baz header to quux:
haws https://... x-foo:bar x-baz:quux
The process's standard input will be used as the request body. For example, if
you have prepared an Elasticsearch bulk API request body in body.json, you
can post it as follows:
haws post https://search-....us-east-1.es.amazonaws.com/_bulk <body.json
MIT
FAQs
Performs AWS Signature Version 4-signed HTTP requests from the command line.
The npm package http-aws4 receives a total of 3 weekly downloads. As such, http-aws4 popularity was classified as not popular.
We found that http-aws4 demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
OpenAI rotated macOS signing certificates after a malicious Axios package reached its CI pipeline in a broader software supply chain attack.

Security News
Open source is under attack because of how much value it creates. It has been the foundation of every major software innovation for the last three decades. This is not the time to walk away from it.

Security News
Socket CEO Feross Aboukhadijeh breaks down how North Korea hijacked Axios and what it means for the future of software supply chain security.