Research
Security News
Malicious npm Package Targets Solana Developers and Hijacks Funds
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
minimalist wget clone written in node. HTTP GETs a file and saves it to the current working directory
Minimalist command line downloader written in node, inspired by wget. HTTP GETs a file and streams it into a file in the current working directory. Specializes at downloading many files in parallel.
npm install nugget -g
Usage: nugget <urls> [options]
-o, --output output filename
-d, --dir output parent directory
-c, --continue resume aborted download
-f, --force ignore response codes > 299
-s, --sockets concurrent socket limit (default infinity)
-q, --quiet disable logging
-t, --tmpfile write files to <name>.tmp while downloading
--proxy specify a proxy to use
--no-strict-ssl disable strict SSL cehcking
nugget http://foo.com/bar.jpg
# downloads bar.jpg and stores it in the current directory
or
nugget http://foo.com/bar.jpg -O baz.jpg
# saves it as baz.jpg. you can also do lowercase -o
if you get a statusCode of 300 or greater nugget will stop. you can force it to stream the response into a file anyway by doing nugget http://404link.com/file.html -f
or --force
works too
you can also download multiple files, just pass multiple urls:
The following options are recognized by nugget:
-o|-O|--out
- specify the filename to write to. this only works if you are downloading a single file-d|--dir
- save files in a directory other than the current one.-c|--continue
- resume downloads if a partially complete target file already exists. If the target file exists and is the same size as the remote file, nothing will be done.-f|--force
- force the server response to be saved to the target file, even if it's a non-successful status code.-s|--sockets
- default Infinity. specify the number of http sockets to use at once (this controls concurrency)-q|--quiet
- disable logging-t, --tmpfile
- write files to .tmp while downloading--proxy
- specify a proxy to use--no-strict-ssl
- disable strict sslFAQs
minimalist wget clone written in node. HTTP GETs a file and saves it to the current working directory
The npm package nugget receives a total of 53,641 weekly downloads. As such, nugget popularity was classified as popular.
We found that nugget demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 4 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
Security News
Research
Socket researchers have discovered malicious npm packages targeting crypto developers, stealing credentials and wallet data using spyware delivered through typosquats of popular cryptographic libraries.
Security News
Socket's package search now displays weekly downloads for npm packages, helping developers quickly assess popularity and make more informed decisions.