
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
A command-line utility to send encrypted emails via SMTP with OpenPGP.js and Nodemailer.
mailock is a simple command-line utility that lets you encrypt and decrypt your files, sign and verify your messages, and send out content securely through SMTP using the Nodemailer library. Taking advantage of Node.js's great cross-platform support, this project aims to make use of these libraries and making standard PGP encryption services available in one package.
npm install -g mailock
Generate your private and public keys.
mailock --keygen
mailock encrypt receiver@someserver.com plaintextFile
mailock decrypt user@someserver.com encryptedMessage
mailock sign user@someserver.com messagefile
mailock verify user@someserver.com message
Returns true if signature validation is successful.
All of the project's file security methods are done using the OpenPGP.js library, and email service with Nodemailer.
For more information on how these libraries work, please check out their GitHub pages:
FAQs
A command-line utility to send encrypted emails via SMTP with OpenPGP.js and Nodemailer.
The npm package mailock receives a total of 5 weekly downloads. As such, mailock popularity was classified as not popular.
We found that mailock demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.