
Security News
/Research
Wallet-Draining npm Package Impersonates Nodemailer to Hijack Crypto Transactions
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
node-red-contrib-better-sftp
Advanced tools
Better SFTP was created out of necessity for a SFTP node which was fully implemented and had several options to configure algorithms.
Big shout out to jyu213 for creating ssh2-sftp-client to make development of this node easy.
Run the following command in the root directory of your Node-RED install
npm install node-red-contrib-better-sftp
List Directory - Lists contents of msg.payload
as a directory OR working directory on node config.
Get - Set msg.payload
to get the file OR working directory + file name in configuration will be used.
Put - Set msg.payload.data
to either the file name, buffer stream, or buffer object of the source file.
Set msg.payload.filename
to the desired name of remote file.
If msg.payload.filename
is not specified filename in node config will be used.
File contents will be uploaded to the SFTP server in the working directory specified.
Delete File - Set msg.payload
to the name of the file you wish to delete in the working directory.
Make Directory - Set msg.payload
to the name of the directory to make. If blank working directory will be used.
Remove Directory - Set msg.payload
to the name of the directory to remove. If blank working directory will be used.
Host, username, and password are required to configure a new SFTP client.
Algorithms are set to pre-defined default values. If you need to modify them see ssh2-streams for more information.
See license
FAQs
A better node for SFTP communication.
The npm package node-red-contrib-better-sftp receives a total of 56 weekly downloads. As such, node-red-contrib-better-sftp popularity was classified as not popular.
We found that node-red-contrib-better-sftp demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
/Research
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
Security News
This episode explores the hard problem of reachability analysis, from static analysis limits to handling dynamic languages and massive dependency trees.
Security News
/Research
Malicious Nx npm versions stole secrets and wallet info using AI CLI tools; Socket’s AI scanner detected the supply chain attack and flagged the malware.