
Threat Research
/Security News
Searchjacked: Hidden Browser Extensions Hijack Searches for 13 Million Users
319 browser extensions installed by 13.4 million users hijack searches, capture queries, and collect referral payments from Yahoo and Bing.
Self-service command-line interface for Media Moana — manage media, folders, and AI processing from the terminal.
npm install -g moana-cli
Requires Node.js 20+. Run without installing via npx moana-cli.
moana login # browser-based authentication
moana folder list # list your folders
moana media upload ./photo.jpg # upload a file
Run moana --help to see all commands, or moana <command> --help for command-specific options.
Config is stored at ~/.moana/config.yml. Manage it with moana config.
Most commands accept --output json|yaml|table (table is the default for list commands). All formats are syntax-highlighted.
git clone https://github.com/mediamoana/moana-cli.git
cd moana-cli
npm install
npm link # makes the `moana` binary available locally
Useful scripts:
npm start -- folder list
npm run lint
npm run lint:fix
npm run format
Maintainer notes — for releasing new versions of
moana-clito npm.
npm Trusted Publishing requires the package to already exist before the publisher can be configured, so the very first version is published from your machine:
npm publish --dry-run # sanity-check the tarball (runs lint gate)
npm login # browser flow
npm publish --otp=123456 # replace with current OTP
Verify:
npm view moana-cli version
npx moana-cli@latest --help
After v1.0.0 is live on npmjs.com, wire up CI so future releases don't need a token or OTP:
mediamoanamoana-clipublish.ymlWith Trusted Publishing configured, .github/workflows/publish.yml publishes on every v* tag push — using OIDC, with provenance attestation, and no stored secrets:
npm version patch # bumps package.json, commits, creates a v* tag
git push --follow-tags # tag push triggers the publish workflow
Watch the run at https://github.com/mediamoana/moana-cli/actions.
MIT
FAQs
User CLI for Moana - Self-service subscription and billing management
The npm package moana-cli receives a total of 0 weekly downloads. As such, moana-cli popularity was classified as not popular.
We found that moana-cli demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Threat Research
/Security News
319 browser extensions installed by 13.4 million users hijack searches, capture queries, and collect referral payments from Yahoo and Bing.

Threat Research
Malicious Firefox extensions mimic Phantom, Jupiter, and Bitget wallets to steal recovery phrases and private keys, with one fetching its payload remotely.

Product
Socket Threat Intel now shows which malware campaigns were blocked or detected in your organization, with links to scans and Firewall events.