
Research
/Security News
9 Malicious NuGet Packages Deliver Time-Delayed Destructive Payloads
Socket researchers discovered nine malicious NuGet packages that use time-delayed payloads to crash applications and corrupt industrial control systems.
If you like the project, please remember to star it so we can grow the community!

If you want your environment listed in the showcase, please submit a PR
Uses Docker + Docker Compose to provide a consistent and reproducible build environment. Base image assumes the minimum while still being useful out of the box.
Everything depends on myos base Docker image. This image is available on Dockerhub, but you may also build it using the included Dockerfile.
The default docker-compose.yml mounts your hosts ~/.ssh/authorized_keys file into the running container. This is what allows the openSSH server to authenticate you when you connect. This means you will need an authorized_keys file in the correct location with any keys you want to be able to use.
OSX Users: For display forwarding to work, you'll need to have X11 Quartz. It's crappy and I'd love to find an alternative.
Ctrl-D is the most sure fire way of getting out of the container
$ npm install -g myos
$ myos init ./template
$ cd template
$ myos create fooName
$ myos connect
Assuming you've already installed the tool, my personal configuration can be used to test out MyOS.
$ git clone https://github.com/rylandg/rylandg-myosfiles
$ cd rylandg-myosfiles
$ myos create rysetup
$ myos connect rysetup
myos init <dir>
Creates the initial templates that the default docker-compose.yml expects. These are...
# vim
vim/binds.vim
vim/helpers.vim
vim/plugins.vim
vim/vimrc
# zsh
zsh/.zlogin
zsh/.zprofile
zsh/.zshenv
zsh/.zshrc
# tmux
tmux/tmux_saves
tmux/install_tmux.sh
tmux/tmux.conf
These files are empty (for the most part). You're expected to add your environment specific settings.
myos create <name>
Runs docker-compose up -d from the current directory
myos connect
Connects to a previously created MyOS environment
myos restart <name>
Restart a previously created MyOS environment
myos remove <name>
Remove a running MyOS environment
FAQs
A fully dockerized development environment
We found that myos demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
Socket researchers discovered nine malicious NuGet packages that use time-delayed payloads to crash applications and corrupt industrial control systems.

Security News
Socket CTO Ahmad Nassri discusses why supply chain attacks now target developer machines and what AI means for the future of enterprise security.

Security News
Learn the essential steps every developer should take to stay secure on npm and reduce exposure to supply chain attacks.