
Research
Malicious npm Packages Impersonate Flashbots SDKs, Targeting Ethereum Wallet Credentials
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
slacker-cli
Advanced tools
The CLI that helps you managing your Slack workspace.
I am managing the slack workspace that everyone can join. The number of members in the workspace increased from 800 ish to over 4000. We wanted to manage the workspace with minimum effort.
Through this CLI, you can do the following manipulation in your workspace.
Create a Slack App in your Slack admin console.
https://api.slack.com/apps/
- channels:history
- channels:join
- channels:manage
- channels:read
For all command execution, you need SLACK_TOKEN
env value. The token value must start with "xoxb-".
SLACK_TOKEN=xoxb-1234567890 slacker exec archiveDatedChannels <dayToArchive> [isDryRun]
or
SLACK_TOKEN=xoxb-1234567890 slacker e a <dayToArchive> [isDryRun]
Example:
Archive channels that have no activity in last 31 days without dryRun.
SLACK_TOKEN=xoxb-1234567890 slacker e a 31 0
SLACK_TOKEN=xoxb-1234567890 slacker exec inviteAllMembers <channelsName> [isDryRun]
or
SLACK_TOKEN=xoxb-1234567890 slacker e i <channelsName> [isDryRun]
Example:
Invite all members to "new-channel" without dryRun.
SLACK_TOKEN=xoxb-1234567890 slacker e i new-channel 0
It is not great fetching the list of channels, or the list of users every time. The CLI caches them and store it in a file.
All GET queries' results are stored in cache.
To view what is cached:
SLACK_TOKEN=xoxb-1234567890 slacker exec cache
The command above shows the list of key names. Each key has unix date when they are cached.
To delete particular cache key:
SLACK_TOKEN=xoxb-1234567890 slacker exec cache [keyToBust]
Example:
Bust 'user.list'.
SLACK_TOKEN=xoxb-1234567890 slacker exec cache user.list
FAQs
The CLI that helps you managing your Slack workspace.
The npm package slacker-cli receives a total of 3 weekly downloads. As such, slacker-cli popularity was classified as not popular.
We found that slacker-cli demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
Security News
Ruby maintainers from Bundler and rbenv teams are building rv to bring Python uv's speed and unified tooling approach to Ruby development.
Security News
Following last week’s supply chain attack, Nx published findings on the GitHub Actions exploit and moved npm publishing to Trusted Publishers.