Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
A CLI tool to interface with the Hyperverge API for document verification.
npm i -g hyperverge
To test if your Hyperverge is reachable run. You should see an AoK!
if everything went well.
hyperverge
test: Testing connection to Hyperverge...
test: AoK!
hyperverge --help
Usage: hyperverge [options]
Options:
-V, --version output the version number
-c, --config [path] Config JSON File containing any or all of the other parameters. action, directory, file, output, appKey, appId, host (default: "./credentials.json")
-a, --action [action] The action to run. One of ["test","readPAN","readPassport","readAadhaar","readKYC"] (default: "test")
-d, --directory [path] The path to a folder of items to be used for the request
-f, --file [path] The path to a folder of items to be used for the request
-o, --output [path] The file to write the result of the operation to (default: "")
-k, --app-key [key] The Hyperverge App Key (default: "")
-i, --app-id [id] The Hyperverge App ID (default: "")
-h, --host [host] The Hypervege host to use
-h, --help output usage information
hyperverge \
--config /path/to/config.js \
--host 'https://ind-docs.hyperverge.co/v2.0' \
--app-key '<HYPERVERGE_APP_KEY>' \
--app-id '<HYPERVERGE_APP_ID>' \
--action '<test|readPAN|readPassport|readAAdhaar|readKYC>' \
--directory '/path/directory' \
--file '/path/to/file' \
--output '/path/to/output'
The CLI can either upload one file to the service or attempt to recursively traverse a directory and attempt uploading all compatible files.
To upload a single file to a service, specify the file option either via CLI or JSON config
hyperverge -a readKYC -f /path/to/file -c config.json
The output will be a single JSON object. If an error occurred, the JSON object will have an err
key set.
Sample output:
{
"action": "readKYC",
"file": "/path/to/file",
"status": "success",
"statusCode": "200",
"result": [
... results from Hyperverge ...
],
"err": null
}
To upload a directory of files recursively, specify the directory option either via CLI options or config file
hyperverge -a readKYC -d /path/to/directory -c config.json
The output will be a single JSON object having the keys success
and errors
which are both array of objects similar
to the one above.
This configuration can be passed via the CLI options listed above or via JSON configuration file.
Sample Configuration JSON:
{
"host": "https://ind-docs.hyperverge.co/v2.0",
"appId": "xxxxx",
"appKey": "xxxxx",
"action": "readKYC",
"file": "/path/to/file",
"directory": "/path/to/directory",
"output": "/path/to/output"
}
file
and directory
will cause an error. The CLI must be passed one or the other but not both.test
action does not require credentials but every other action must have appKey
and appId
passed
either via CLI or via the JSON configuration file.FAQs
A CLI tool to interface with the Hyperverge API
The npm package hyperverge receives a total of 5 weekly downloads. As such, hyperverge popularity was classified as not popular.
We found that hyperverge demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.