Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
OpsTail allows you to 'tail' the logs coming from the firehose
The easiest thing to do is just run opstail
from the terminal.
You can see the different options with -h
or --help
flag
To view a list of routing key run opstail -l
To get growl notifications turned on you need to have the correct library.
Install growlnotify(1). On OS X 10.8, Notification Center is supported using terminal-notifier. To install:
$ sudo gem install terminal-notifier
Install notify-send
through the libnotify-bin package:
$ sudo apt-get install libnotify-bin
Download and install Growl for Windows Download growlnotify - IMPORTANT : Unpack growlnotify to a folder that is present in your path!
Install with npm
:
$ npm install -g opstail
There are also several key commands you can use
Key | Description |
---|---|
/ | Enter into filter mode, just enter a regex (Enter nothing to clear search) |
\ | Enter into exclusion filter mode. Just enter a regex and the message will be excluded |
t | Toggle All Stack Traces |
m | Toggle Meta Data |
i | Toggle info messages |
w | Toggle warn messages |
e | Toggle Error Messages |
d | Toggle Debug Messages |
shift + i | Toggle Info Stack Traces |
shift + w | Toggle Warn Stack Traces |
shift + e | Toggle Error Stack Traces |
shift + d | Toggle Debug Stack Traces |
numTraces
\
and you can exclude messages from the results. Stacks on top of
the /
inclusion filter. Type a blank message to remove the filter./
and then a regex without a delimiter.
All filters are global and case insensitive. To clear your filter just type /
then hist enter with a empty
search.FAQs
Live tail of EventsD
The npm package opstail receives a total of 0 weekly downloads. As such, opstail popularity was classified as not popular.
We found that opstail demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.