Security News
Research
Data Theft Repackaged: A Case Study in Malicious Wrapper Packages on npm
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
replit-export
Advanced tools
Replit has recently updated its Starter Plan (the core free plan) to limit users to 3 Repls. Accounts exceeding this limit may face restrictions in the future. To help transition smoothly, this CLI script downloads all Repls from your account, including e
Replit has recently updated its Starter Plan (the core free plan) to limit users to 3 Repls. Accounts exceeding this limit may face restrictions in the future. To help transition smoothly, this CLI script downloads all Repls from your account, including environment variables and configuration data, allowing you to securely move your projects off Replit.
To install the package globally, run:
npm install -g replit-export
replit-export --help
-V, --version
Outputs the version number.
-o, --output <directory>
Specifies the directory to save Repls.
-a, --auth <cookie>
Replit authorization cookie (connect.sid
).
-l, --load <file>
Load a previous save file to continue downloading (default: .replit-export.save
).
-c, --concurrent <number>
Sets the maximum number of concurrent downloads (default: 15
).
-m, --max
Limits the maximum number of Repls to download.
-f, --filter <...files>
Filters out files matching the specified patterns (default: ["node_modules/",".cargo/"]
).
-h, --help
Displays help information.
To retrieve the authorization cookie required for this script:
connect.sid
cookie.To quickly start downloading all your Repls, run the following command:
replit-export --output repls/ --auth <cookie>
This will download all public and private Repls from your account to the repls/
folder.
Environment variables are automatically extracted and saved in a .env
file in the root folder of each Repl.
If you have a large number of Repls, ensure you have sufficient disk space on your computer. Replit enforces a rate limit for downloading entire Repl zips. The CLI handles these rate limits automatically, and you may notice occasional pauses. If you have many Repls, it's recommended to leave the CLI running in the background until the process is complete.
FAQs
Replit has recently updated its Starter Plan (the core free plan) to limit users to 3 Repls. Accounts exceeding this limit will face restrictions in the future (all repls will be automatically deleted in a year) unless they subscribe to a $25/month plan.
The npm package replit-export receives a total of 0 weekly downloads. As such, replit-export popularity was classified as not popular.
We found that replit-export demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Research
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
Research
Security News
Attackers used a malicious npm package typosquatting a popular ESLint plugin to steal sensitive data, execute commands, and exploit developer systems.
Security News
The Ultralytics' PyPI Package was compromised four times in one weekend through GitHub Actions cache poisoning and failure to rotate previously compromised API tokens.