
Security News
vlt Launches "reproduce": A New Tool Challenging the Limits of Package Provenance
vlt's new "reproduce" tool verifies npm packages against their source code, outperforming traditional provenance adoption in the JavaScript ecosystem.
privnote-cli
Advanced tools
the power of privnote.com in your terminal
Privnote allows you to create one-time-pad encrypted, burn-after-reading notes over the internet. It's a great way to share passwords or other sensitive peices of information. But, you have to use a web browser! Or, should I say, had to.
npm install -g privnote-cli
# don't forget to `nodenv rehash` if you're using nodenv
You bring the plaintext; privnote
will print the link to stdout and the clipboard.
gpg
. (Recommended)$ privnote
bob,
the narwhal bacons at midnight.
-- alice
^D
https://privnote.com/n/abcdefghijklmnop/#qrstuvwxyz123456
Be sure to clear your shell history ($HISTFILE
) if you included secrets in your command.
$ ruby -e 'require "securerandom"; print "#{SecureRandom.urlsafe_base64(12)}\n";' | privnote
https://privnote.com/n/abcdefghijklmnop/#qrstuvwxyz123456
$ privnote < secrets.txt
https://privnote.com/n/abcdefghijklmnop/#qrstuvwxyz123456
yarn
installation (h/t @deecewan)echo "doh! i forgot the releasing section" >> README.md
git add --all
git commit -m"added the releasing section, bc i'm forgetful."
npm version patch
git push origin master
npm publish
FAQs
nodejs wrapper for privnote.com
We found that privnote-cli demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
vlt's new "reproduce" tool verifies npm packages against their source code, outperforming traditional provenance adoption in the JavaScript ecosystem.
Research
Security News
Socket researchers uncovered a malicious PyPI package exploiting Deezer’s API to enable coordinated music piracy through API abuse and C2 server control.
Research
The Socket Research Team discovered a malicious npm package, '@ton-wallet/create', stealing cryptocurrency wallet keys from developers and users in the TON ecosystem.