
Research
Malicious npm Packages Impersonate Flashbots SDKs, Targeting Ethereum Wallet Credentials
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
Kohut is a simple CLI tool written in NodeJS for creating next level github contribution graphs.
Kohut is the first tool that let's you write text to your contributions graph. It's free and easy to use.
Just look how cute logo you can write on your github mainpage.
These are my github contributions in year 2003. https://github.com/Borecjeborec1
Easily, just follow these 4 steps.
Steps 1 and 2 are just normal GitHub repo creating, you can skip them and use existing repo, or create it your own way.
Navigate to this page https://github.com/new and create a new repo. Fill out the form and click create. It can be private repo as well.
When you create the new repo a bunch of commands jumps into your face on GitHub website. Follow them. Create folder, open terminal and paste the commands there. When you are done you should have folder with readme.md inside on your local machine. The same folder structure should appear on GitHub page too.
The commands should look like this:
echo "# ds" >> README.md
git init
git add README.md
git commit -m "first commit"
git branch -M main
git remote add origin https://github.com/gymplgames/ds.git
git push -u origin main
If you have NodeJS installed, download the Kohut package from npm using
npm i -g kohut
You are nearly done. 1 last step to do. Open terminal in your folder where you have your git initialized and execute kohut command.
kohut [text] [year]
In my case it's
kohut atzuki 2003
Wait a few seconds and you are done!
Good Job! You should have your text written inside contribution graph on your main page.
Warning! Kohut is not supposed to spam GitHub servers or harass someone. Please do not abuse it that way. It's use case is only for fun and aesthetics.
Basicly Kohut takes initialized repo and create a file called fileName. Then kohut makes changes in it (concretly rewrites random number) and assign commit date to a date mapped from a letters hashmap.
I will try to implement more features in future.
Planned features:
This project is open-source, feel free to contribute.
FAQs
create 2d text into your github contributions
The npm package kohut receives a total of 0 weekly downloads. As such, kohut popularity was classified as not popular.
We found that kohut demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
Security News
Ruby maintainers from Bundler and rbenv teams are building rv to bring Python uv's speed and unified tooling approach to Ruby development.
Security News
Following last week’s supply chain attack, Nx published findings on the GitHub Actions exploit and moved npm publishing to Trusted Publishers.