Research
Security News
Quasar RAT Disguised as an npm Package for Detecting Vulnerabilities in Ethereum Smart Contracts
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
A node REPL with ShellJS loaded by default.
This was inspired by (and forked from) n_.
It's recommended to install this package globally:
$ npm install -g n_shell
Invoking n_shell
starts a node REPL with ShellJS required globally:
bash $ n_shell
shelljs $ ls()
[ 'LICENSE',
'README.md',
'bin',
'node_modules',
'package.json',
'src',
'tmp' ]
shelljs $ pwd()
'/path/to/dir'
shelljs/global
No problem:
bash $ n_shell --no_global
shelljs $ typeof ls // not in the global namespace
'undefined'
shelljs $ shell.ls()
[ 'LICENSE',
'README.md',
'bin',
'node_modules',
'package.json',
'src',
'tmp' ]
shelljs $ shell.pwd()
'/path/to/dir'
You're covered:
bash $ n_shell --no_global=$
shelljs $ $.ls()
[ 'LICENSE',
'README.md',
'bin',
'node_modules',
'package.json',
'src',
'tmp' ]
shelljs $ $.pwd()
'/path/to/dir'
Just install that version locally (npm install shelljs
) and start up
n_shell
. You should see a warning message like this:
bash $ n_shell
Warning: using shelljs found at /path/to/dir/node_modules/shelljs
shelljs $
--global
: Start a node REPL with the equivalent of
require('shelljs/global')
. This is the default behavior.--no_global [PREFIX]
, --local [PREFIX]
, -n [PREFIX]
: Start a node REPL
with the equivalent of var PREFIX = require('shelljs')
. PREFIX
defaults to shell
, if not specified.--use_strict
: enforce strict mode (default is false)--prompt <FORMAT>
: use this format to generate the REPL prompt. Default is
"shelljs %v%l $
"
%v
: show the current version (from package.json
)%l
: show [local]
if this is installed from a local module (whenever
the warning message above would be printed)Similarly to n_
, n_shell
stores REPL history under ~/.n_shell_history
.
FAQs
A node REPL with ShellJS loaded by default
The npm package n_shell receives a total of 8 weekly downloads. As such, n_shell popularity was classified as not popular.
We found that n_shell demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
Security News
Research
A supply chain attack on Rspack's npm packages injected cryptomining malware, potentially impacting thousands of developers.
Research
Security News
Socket researchers discovered a malware campaign on npm delivering the Skuld infostealer via typosquatted packages, exposing sensitive data.