
Security News
Axios Maintainer Confirms Social Engineering Attack Behind npm Compromise
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.
scp-upload-cli
Advanced tools
A convenient CLI tool for uploading files to remote servers via SCP protocol
一个便捷的命令行工具,用于通过SCP协议将本地文件快速上传到远程服务器。
# 克隆项目
git clone <repository-url>
cd upload-file-cli
# 安装依赖
npm install
# 全局安装(可选)
npm install -g .
# 安装依赖后直接运行
npm start
运行工具:
# 如果全局安装
scp-upload
# 或者直接运行
npm start
本工具实现了与以下SCP命令相同的功能:
scp /Users/xxx/Downloads/.env root@xxx.xxx.xxx.xxx:/data/config/playground/.env
启动工具后,您将看到以下选项:
~/.ssh/id_rsa 默认密钥配置文件存储在用户主目录下:
~/.scp-upload-cli/servers.json
配置文件格式:
{
"my-server": {
"host": "192.168.1.100",
"username": "root",
"port": 22,
"defaultRemotePath": "/data/uploads",
"privateKeyPath": "/Users/username/.ssh/id_rsa",
"createdAt": "2024-01-01T00:00:00.000Z",
"lastUsed": "2024-01-01T12:00:00.000Z"
}
}
SSH密钥认证(推荐)
密码认证
❌ 连接服务器失败: connect ECONNREFUSED
解决方案:
❌ 认证失败: All configured authentication methods failed
解决方案:
❌ 没有读取文件的权限
解决方案:
chmod 644 filename 修改文件权限❌ 创建远程目录失败
解决方案:
如需更详细的错误信息,可以查看终端输出的完整错误堆栈。
upload-file-cli/
├── bin/
│ └── cli.js # 主程序入口
├── lib/
│ ├── scp-uploader.js # SCP上传核心模块
│ ├── config-manager.js # 配置管理模块
│ └── validator.js # 验证器模块
├── package.json # 项目配置
├── README.md # 说明文档
└── .gitignore # Git忽略文件
ssh2: SSH2协议实现,用于建立安全连接inquirer: 提供交互式命令行界面chalk: 终端文本着色ora: 终端加载动画fs-extra: 文件系统操作增强commander: 命令行参数解析欢迎提交Issue和Pull Request来改进这个工具!
# 克隆项目
git clone <repository-url>
cd upload-file-cli
# 安装依赖
npm install
# 运行开发版本
npm start
MIT License
如果您遇到问题或有功能建议,请:
享受快速、安全的文件上传体验! 🚀
FAQs
A convenient CLI tool for uploading files to remote servers via SCP protocol
We found that scp-upload-cli demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.

Security News
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.