
Research
Malicious npm Packages Impersonate Flashbots SDKs, Targeting Ethereum Wallet Credentials
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
superagent-cli
Advanced tools
A command line interface for the superagent rest library. Designed to make testing JSON apis from the command line easier.
to install:
npm install -g superagent-cli
the super agent cli command is superagent
and requests look like the following:
superagent or superagent -h to display help
superagent <url> <rest method(get|post|put|patch|delete)> <json data>
superagent www.google.com
superagent www.google.com get
superagent localhost:3000 post '{"hello":"world"}'
superagent localhost:3000 post {hello: \'world\'}
Note: if using javascript literal notation (instead of fully qualified JSON) all
quotes around string must be escaped
ex: {hello: 'world'}
must actually be hello: \'world\'
or use two sets of quotes {hello: "'super world'"}
which will keep white space the same
superagent-cli can also add basic HTTP Auth to any request with with -u username:password
superagent -u username:password localhost:3000
superagent-cli can read json data from a file using the -f parameter.
superagent example.com/test post -f request_body.json
superagent-cli can set arbitrary headers with -H
superagent -H "Accept: text/plain, X-Arbitrary-Header: true" example.com
FAQs
A cli wrapper for super agent
The npm package superagent-cli receives a total of 0 weekly downloads. As such, superagent-cli popularity was classified as not popular.
We found that superagent-cli demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
Security News
Ruby maintainers from Bundler and rbenv teams are building rv to bring Python uv's speed and unified tooling approach to Ruby development.
Security News
Following last week’s supply chain attack, Nx published findings on the GitHub Actions exploit and moved npm publishing to Trusted Publishers.