
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
stymie will use the default GPG key.username: 'derp',
password: '1234',
SSN: '123-45-6789',
securityAnswer: '1st Avenue'
.stymie.d/, it's easy to port between systems.stymie to be safely versioned.--hidden-recipient flag so as to not include the recipient's key ID in the encrypted file.$HISTIGNORE so stymie commands aren't stored in history [1].[1] As an alternative to setting $HISTIGNORE, most shells by default allow for any command preceded by a [[SPACE]] to be ignored by history. Check the value of $HISTCONTROL for support.
Only Linux and OS X are supported. There are no plans to support Windows.
npm i stymie
gpg-agent to save typing.example.com key:stymie add example.com
example.com key:stymie edit example.com
username field value from the example.com key:stymie get example.com --field username
password field value from the example.com key and copy it to the system clipboard (OS X):stymie get example.com --field password | pbcopy
Command | Description
------- | --------
add | Adds a new entry
edit | Edits an entry
generate | Generates a diceware passphrase
get | Retrieves an entry
has | Checks if the entry exists
init | Installs the password file directory and config file
list | List all entries
rm | Deletes an entry
Option | Description
------- | --------
--field, -f | Gets the specified key value from an entry (only with `get` command)
--shadow | Obfuscates a password entry
-h, --help | Display help
Benjamin Toll
FAQs
Cryptographically secure password manager
We found that stymie demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.