Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
jsharmony-cms-host
Advanced tools
jsHarmony CMS Host
Install the jsHarmony CMS Host, if not already installed
npm install -g jsharmony-cms-host
Create an empty folder
mkdir cms-files
cd cms-files
Run the jsHarmony CMS Host
jsharmony-cms-host demo.site.jsharmony.com .
Keep the program running. This will connect to the CMS server (in this case demo.site.jsharmony.com), and wait for files to get sent via publish.
If jsharmony-cms-host doesn't start, ensure the Node.js npm folder is in your system PATH variable.
See below for additional command line parameters and flags. Username and password can be specified in the command line.
Add a new Deployment Target, selecting the following options:
Deployment Type: CMS Deployment Host
Host ID: [Click Browse to select Name of Computer]
Publish your CMS Branch to the new Deployment Target. The jsharmony-cms-host program should download the files into the new "cms-files" folder from step 2.
------------------------
:::jsHarmony CMS Host:::
------------------------
Usage: jsharmony-cms-host [cms_url] [target_path] [options]
cms_url - URL to the CMS server, ex: https://instance.example.com:3000
target_path - Location where CMS files will be copied. Use "." for current directory
The following options are available:
--username [username] - CMS server login username
--password [password] - CMS server login password
--host-id [host_id] - ID of the host, to be displayed in the CMS deployment wizard
If not specified, current machine name will be used
--log [log_path] - Log messages and errors to target path
--delete-excess-files - Delete excess files in target_path that are not in the publish build
--overwrite-all - Always replace all local files, instead of comparing size and MD5
--ignore-cert-errors - Ignore Certificate Errors (ex. for self-signed certificates)
--ignore-path [path] - Ignore a file or folder:
folder/ (folder anywhere)
file.txt (file.txt anywhere)
/folder/ (folder in root)
/file.txt (file.txt in root)
--download [deployment_id] - Download an individual deployment
FAQs
jsHarmony CMS Deployment Target Host
We found that jsharmony-cms-host demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.