Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
ScrollHub turns any server into a place where people can instantly launch unlimited new (ephemeral) website powered by Scroll.
ScrollHub is a super server for publishing websites, scientific articles, blog posts, books, and more. It provides a seamless platform for content creation and distribution.
Try it yourself at: https://hub.scroll.pub
Launch a new Ubuntu Droplet on Digital Ocean (or your cloud provider of choice), then SSH into your server and run this oneliner:
apt install -y make zip && git clone https://github.com/tj/n && cd n && make install && n latest && cd && git config --global user.name "ScrollHub" && git config --global user.email "scrollhub@scroll.pub" && git clone https://github.com/breck7/ScrollHub && cd ScrollHub && npm install . && npm install scroll-cli pm2 prettier -g && git config --global receive.denyCurrentBranch updateInstead && pm2 start server.js --node-args="--max-old-space-size=4096" --log ~/ScrollHub/pm2.log && pm2 startup && pm2 save
sudo apt update && sudo apt install -y tor && echo -e "HiddenServiceDir /var/lib/tor/hidden_service/\nHiddenServicePort 80 127.0.0.1:3000" | sudo tee -a /etc/tor/torrc && sudo systemctl restart tor && sudo cat /var/lib/tor/hidden_service/hostname
Add these to your shell configuration for a smoother workflow:
# Scroll
alias sb="scroll build"
# Npm
alias x="npm run"
# ScrollHub
alias hub="hub start"
# Git
alias gs="git status"
alias ga="git add ."
alias gc="git commit --allow-empty-message -m ''"
alias acp="git add . && git commit --allow-empty-message -m '' && git push"
Note: Make sure server-side .gitignore
includes all log and frequently changed files to avoid local push conflicts.
ScrollHub uses git for versioning files. If you're developing locally and encounter merge conflicts:
https://hub.scroll.pub/status/[folderName]
git config --system receive.denyNonFastForwards true
The complete release history is available in multiple formats:
View the full changelog with detailed release notes at Release Notes.
ScrollHub is released into the public domain.
FAQs
ScrollHub turns any server into a place where people can instantly launch unlimited new (ephemeral) website powered by Scroll.
We found that scrollhub demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.