
Research
Security News
Malicious PyPI Package Exploits Deezer API for Coordinated Music Piracy
Socket researchers uncovered a malicious PyPI package exploiting Deezer’s API to enable coordinated music piracy through API abuse and C2 server control.
rich-filemanager
Advanced tools
Rich Filemanager is an open-source file manager released under MIT license. Based on the simogeo Filemanager, with a lot of improvements and new features.
Filemanager live example: http://fm.devale.pro
Filemanager was initially designed to interact with a number of programming languages via connectors. But since many changes have been done recently, PHP & ASHX connectors are the only actual connectors currently. Compatibility with other connectors is most likely completely broken. You are still able you to download unsupported v0.8 from archive (PHP, ASHX, ASP, CFM, lasso, PL and JSP)
Browser compatibility:
Deploy and setup RichFilemanager on your website Worry about security of your application
Filemanager is highly documented on the wiki pages. API, see below.
Any contribution is greatly appreciated. You can become a maintainer for any of existent connectors, or create new one for your server side language. Check the details in API section.
Released under the MIT license.
FAQs
Highly customizable open-source file manager
The npm package rich-filemanager receives a total of 39 weekly downloads. As such, rich-filemanager popularity was classified as not popular.
We found that rich-filemanager demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers uncovered a malicious PyPI package exploiting Deezer’s API to enable coordinated music piracy through API abuse and C2 server control.
Research
The Socket Research Team discovered a malicious npm package, '@ton-wallet/create', stealing cryptocurrency wallet keys from developers and users in the TON ecosystem.
Security News
Newly introduced telemetry in devenv 1.4 sparked a backlash over privacy concerns, leading to the removal of its AI-powered feature after strong community pushback.