
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
npm install sthree
Usage is pretty straight forward
var fs = require('fs');
var s3 = require('sthree')({
bucket: "bucketname",
key: "PUBLICKEY",
secret: "SUPERSECRETKEY"
});
s3.put(fs.createReadStream('./my_secret_identity.png'), '/my_secret_identity.png', function(error, response){
if (error) return console.log(error, response);
console.log("Hope no one sees this!");
});
s3.get('/my_secret_identity.png', function(error, response){
if (error) return console.log(error, response);
var saveStream = fs.createWriteStream('./bruce_wayne.png');
response.pipe(saveStream);
console.log("Well, it wouldn't stay a secret forever.");
});
s3.put(fs.createReadStream('./me_saving_gotham.mp4'), '/me_saving_gotham.mp4', function(error, response){
if (error) return console.log(error, response);
console.log("Crahing the Batmobile was totally worth it.");
});
// you can pass in custom headers as a second argument, and the callback third
s3.get('/me_saving_gotham.mp4', { Range: "bytes=500-999" }, function(error, response){
if (error) return console.log(error, response);
var saveStream = fs.createWriteStream('./me_saving_gotham.mp4');
response.pipe(saveStream);
console.log("Alfred is a terrible cameraman.");
});
s3.head('/me_saving_gotham.mp4', function(error, response){
if (error) return console.log(error, response);
console.log(response.headers);
});
†string: for convenient arbitrary string storage, uploads a mock file with the given data and a content-type of "text/plain"
FAQs
A module for Amazon S3 that makes file processing a breeze
We found that sthree demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.