
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
An interactive file renamer/mover inspired by git
npm install -g imv
imv './home/*.png'
--editor param or automatically via your git config)../home/customer.png
./home/puppy.png
./home/cat.png
./home-page/user.png
./home-page/puppy.png
./home-page/cat.png
/home directory because the directory is now empty.Usage: imv [options] <glob>
imv -- interactive move files
Options:
-v, --version output the version number
-e, --editor <editor> use this editor to modify your file paths
-i, --ignore <glob> ignore files that match this glob pattern
-g, --gitignore ignore files that match patterns in .gitignore
-o, --overwrite overwrite existing files
-t, --trash send existing files to the trash bin
-k, --keep-empty keep empty affected folders after moving files
-h, --help output usage information
To keep things simple, there are a few limitations:
imv command was made.You can install imv locally to develop on:
npm install
npm run dist
npm link
You can now use the imv command from your terminal. npm start will build in watch mode so you can make edits as you use the tool.
imv uses TypeScript for type safety, ESLint for linting, and Jest for testing.
FAQs
Interactive file mover inspired by git
We found that imv demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.