
Security News
Another Round of TEA Protocol Spam Floods npm, But It’s Not a Worm
Recent coverage mislabels the latest TEA protocol spam as a worm. Here’s what’s actually happening.
A lightweight CLI photo server with admin authentication and React frontend. Start with 'npx snapserve --admin yourpassword'
A lightweight CLI photo server with admin authentication and React frontend. Start a photo server in seconds with drag-and-drop upload and responsive gallery.
# Run instantly with npx (no installation needed)
npx snapserve --admin mysecretpassword
# Server starts on http://localhost:3000
# Open in browser, enter your admin secret, and start uploading photos!
# Run instantly without installation
npx snapserve --admin mysecretpassword
# Custom port and upload directory
npx snapserve --admin mysecret --port 8080 --dir ./my-photos
# Install globally
npm install -g snapserve
# Run from anywhere
snapserve --admin mysecretpassword
# Clone and install
git clone <repository>
cd snapserve
npm install
# Run locally
npm start -- --admin mysecretpassword
POST /api/auth - Login with admin secretGET /api/auth/status - Check authentication statusPOST /api/auth/logout - LogoutGET /api/photos - List all uploaded photosPOST /api/photos/upload - Upload photos (multipart/form-data)/uploads/* - Serve uploaded photos/* - Serve React appsnapserve [options]
Options:
--admin <secret> Admin secret password (required, min 3 chars)
-p, --port <port> Port to run server on (default: 3000)
-d, --dir <dir> Directory for uploads (default: ./uploads)
-h, --help Display help
-V, --version Display version
Examples:
snapserve --admin mypassword123
snapserve --admin secret --port 8080 --dir ~/Pictures
Authentication & Security
Photo Management
Frontend Integration
CLI & Server
Beautiful gradient login interface with admin secret authentication.
Responsive grid layout with hover effects showing photo metadata.
Drag-and-drop upload with progress indication and file validation.
Admin Secret Based Auth ✅
--admin <secret> parameterList All Photos ✅
/api/photos returns JSON arrayPhoto Upload ✅
/api/photos/upload accepts multipart datasnapserve/
├── package.json
├── bin/snapserve.js # CLI entry point
├── src/
│ ├── server.js # Main server
│ └── routes/
│ ├── auth.js # Authentication
│ ├── photos.js # Photo management
│ └── static.js # Static file serving
├── frontend/ # React TypeScript app
│ ├── package.json
│ ├── vite.config.ts
│ ├── src/
│ │ ├── App.tsx # Main app component
│ │ ├── api.ts # API client
│ │ └── components/
│ │ ├── Login.tsx # Admin login
│ │ ├── PhotoGallery.tsx # Photo gallery
│ │ └── PhotoUpload.tsx # Upload interface
│ └── dist/ # Built React app
├── uploads/ # Photo storage
└── README.md
Port already in use
# Use a different port
snapserve --admin mypassword --port 8080
Permission denied for uploads directory
# Specify a different directory
snapserve --admin mypassword --dir ~/my-photos
Admin secret too short
# Use at least 3 characters
snapserve --admin abc123
Q: Can I change the admin secret while the server is running?
A: No, you need to restart the server with a new --admin parameter.
Q: Where are photos stored?
A: By default in ./uploads/ directory, or specify with --dir option.
Q: Can multiple users upload photos? A: Currently, it's single-admin only. Anyone with the admin secret can upload.
Q: Is this suitable for production? A: This is designed for personal/development use. For production, consider additional security measures.
MIT License - see LICENSE file for details.
FAQs
A lightweight CLI photo server with admin authentication and React frontend. Start with 'npx snapserve --admin yourpassword'
We found that snapserve demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Recent coverage mislabels the latest TEA protocol spam as a worm. Here’s what’s actually happening.

Security News
PyPI adds Trusted Publishing support for GitLab Self-Managed as adoption reaches 25% of uploads

Research
/Security News
A malicious Chrome extension posing as an Ethereum wallet steals seed phrases by encoding them into Sui transactions, enabling full wallet takeover.