
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
One tool to upload/download resources to/from qinniu
sudo npm install -g qtool
Upload resource:
qtool upload -f uploadfolder -a RSxpQIxNIS2vo0vuQR3HX701ddS9fdlUnQ5jV8ul -s xCLWczC5V5kyy7H85MNKNYcXT4wx9k5OzT7YDVFk -b mybucket -k activity -h olf3t4olk.bkt.clouddn.com
Download resource:
qtool download -f downloadfolder -a RSxpQIxNIS2vo0vuQR3HX701ddS9fdlUnQ5jV8ul -s xCLWczC5V5kyy7H85MNKNYcXT4wx9k5OzT7YDVFk -b mybucket -k activity -h olf3t4olk.bkt.clouddn.com
Parameters detail:
-f, --folder <string>
Upload and download forder
-k, --keypreffix <string>
Key preffix.
When uploading, key preffix will insert to the front of key.
When downloading, key preffix will be used to filter the url in cdn.
-a, --accessKey <string>
Access Key
-s, --secretKey <string>
Secret Key
-b, --bucket <string>
Upload and Download bucket of qiniu.
-h, --hostUrl <string>
Qiniu host url. Will be stored when first set.
Example: http://cdn.xxx.com
Any issue please free let me know.
qtool 安装方法:
npm install -g qtool
上传资源:
qtool upload -f uploadfolder -a RSxpQIxNIS2vo0vuQR3HX701ddS9fdlUnQ5jV8ul -s xCLWczC5V5kyy7H85MNKNYcXT4wx9k5OzT7YDVFk -b mybucket -k activity -h olf3t4olk.bkt.clouddn.com
下载资源:
qtool download -f downloadfolder -a RSxpQIxNIS2vo0vuQR3HX701ddS9fdlUnQ5jV8ul -s xCLWczC5V5kyy7H85MNKNYcXT4wx9k5OzT7YDVFk -b mybucket -k activity -h olf3t4olk.bkt.clouddn.com
参数说明:
-f, --folder <string>
上传和下载目录
-k, --keypreffix <string>
上传的时候,前缀会插入到 key 的前面。
下载的时候,前缀会被用于过滤七牛的cdn url。
-a, --accessKey <string>
access Key 七牛官网获取
-s, --secretKey <string>
Secret Key 七牛官网获取
-b, --bucket <string>
上传和下载对象空间
-h, --hostUrl <string>
七牛 host url,比如:http://cdn.xxx.com
FAQs
One tool to upload images to qinniu
We found that qtool demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.