
Research
Security News
The Growing Risk of Malicious Browser Extensions
Socket researchers uncover how browser extensions in trusted stores are used to hijack sessions, redirect traffic, and manipulate user behavior.
Supply Chain Security
Vulnerability
Quality
Maintenance
License
š Hash password directly from your terminal.
Coded with ā¤ļø by Simone Primarosa.
This package is part of the upash project, which aim is to provide a unified and user-friendly APIs for all the passwords hashing algorithms out there.
In particular, this package allows you to use multiple password hashing algorithms through a simple CLI.
npm install -g upash-cli
Usage
$ upash hash <algorithm name> <password string>
$ upash verify [<algorithm name>] <hash string> <password string>
Algorithms available
argon2
scrypt
bcrypt
pbkdf2
Options for argon2 hashing
--variant <number> Variant of argon2 to use.
Can be one of ['d', 'i', 'id'] for
argon2d, argon2i and argon2id respectively.
--iterations <number> Number of iterations to use
--memory <number> Amount of memory to use in kibibytes.
--parallelism <number> Degree of parallelism to use.
Options for scrypt hashing
--blocksize <number> Amount of memory to use in kibibytes.
--cost <number> CPU/memory cost parameter.
--parallelism <number> Degree of parallelism to use.
Options for bcrypt hashing
--rounds <number> Number of iterations to use as as 2^rounds.
Options for pbkdf2 hashing
--iterations <number> Number of iterations to use.
--digest <string> Name of digest to use when applying the key
derivation function.
Can be one of ['sha1', 'sha256', 'sha512'].
Examples
$ upash hash argon2 'Hello World'
$ upash verify pbkdf2 'hash string' 'Hello World'
$ upash hash bcrypt 'Hello World' --rounds=10
Contributions are REALLY welcome and if you find a security flaw in this code, PLEASE report it.
See also the list of contributors who participated in this project.
This project is licensed under the MIT License - see the license file for details.
FAQs
Hash password directly from your terminal.
The npm package upash-cli receives a total of 2 weekly downloads. As such, upash-cli popularity was classified as not popular.
We found that upash-cli demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers uncover how browser extensions in trusted stores are used to hijack sessions, redirect traffic, and manipulate user behavior.
Research
Security News
An in-depth analysis of credential stealers, crypto drainers, cryptojackers, and clipboard hijackers abusing open source package registries to compromise Web3 development environments.
Security News
pnpm 10.12.1 introduces a global virtual store for faster installs and new options for managing dependencies with version catalogs.