Research
Security News
Quasar RAT Disguised as an npm Package for Detecting Vulnerabilities in Ethereum Smart Contracts
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
matchengine-tools
Advanced tools
Tools for interacting with TinEye's MatchEngine.
usage: get-similar.js [-h] [--conf CONF] [--threads THREADS] [--filter FILTER]
outFile
Downloads image similarity data from MatchEngine. Outputs JSON results to the
specified file. Results will be written out as one large object, the keys of
which will be the IDs of the files on the MatchEngine service. The value will
be an array of objects holding the match data. Files with no matches will not
be written out.
Positional arguments:
outFile File to which the JSON output should be written.
Optional arguments:
-h, --help Show this help message and exit.
--conf CONF The JSON config file containing MatchEngine auth details
(default: me.conf.json).
--threads THREADS Number of simulataneous requests to make (default: 2,
max: 4).
--filter FILTER Filter for which MatchEngine files to download the
results of. For example: 'sample' will only download
matches that are prefixed with 'sample'.
usage: bulk-upload.js [-h] [--conf CONF] [--batch BATCH] [--pause PAUSE]
dir path
Upload a directory of images to MatchEngine.
Positional arguments:
dir The directory in which to place the images in MatchEngine (e.
g. 'camping').
path The directory path of images to upload (e.g.
/my/images/camping/).
Optional arguments:
-h, --help Show this help message and exit.
--conf CONF The JSON config file containing MatchEngine auth details
(default: me.conf.json).
--batch BATCH The number of images to upload in a single batch (up to
1000) (default: 1000).
--pause PAUSE How long to pause, in milliseconds, inbetween uploads
(default: 0).
Created by John Resig.
Released under an MIT license.
FAQs
Tools for interacting with TinEye's MatchEngine.
The npm package matchengine-tools receives a total of 4 weekly downloads. As such, matchengine-tools popularity was classified as not popular.
We found that matchengine-tools demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
Security News
Research
A supply chain attack on Rspack's npm packages injected cryptomining malware, potentially impacting thousands of developers.
Research
Security News
Socket researchers discovered a malware campaign on npm delivering the Skuld infostealer via typosquatted packages, exposing sensitive data.