
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
A comprehensive collection of utility tools for file operations, Git management, SCP deployment, HTTP services, and multimedia downloading.
Install globally via npm:
npm install -g zbox-cli
After installation, you can use the zbox command from anywhere in your terminal:
zbox --help
Encrypt files or directories:
zbox file en /path/to/input -o /path/to/output
zbox file en document.txt --overwrite
zbox file en ./folder -e .enc --no-recursive
Decrypt files or directories:
zbox file de /path/to/encrypted.encrypted -o /path/to/output
zbox file de ./encrypted_folder --overwrite
Options:
-o, --output <path> - Output path (default: original path with .encrypted extension)-e, --extension <ext> - Encrypted file extension (default: .encrypted)--no-recursive - Don't process subdirectories recursively--overwrite - Overwrite existing filesRename files randomly with ability to restore:
zbox file rr -p ./files -a 1 # Rename files
zbox file rr -p ./files -a 2 # Restore original names
zbox file rr -p ./files -a 1 --base64 --ext # Rename with base64 encoding and preserve extensions
Options:
-p, --path <path> - Target directory path-a, --action <action> - Action (1: rename, 2: restore)-r, --recordFileName <recordFileName> - Custom record file name-b, --base64 - Apply base64 encoding/decoding to file contents--ext - Preserve file extensionsDownload using Node.js (built-in):
zbox file nodejsDownloadM3u8
Download using FFmpeg:
# Single file download
zbox file ffmpegDownloadM3u8 -u "https://example.com/video.m3u8" -s "output.mp4"
# Batch download from file
zbox file ffmpegDownloadM3u8 -i input_list.txt --saveDir ./downloads
# Print input file template
zbox file ffmpegDownloadM3u8 -p
Options:
-u, --url <url> - M3U8 file URL-s, --saveFilename <saveFilename> - Output filename-i, --inputFile <inputFile> - Input file for batch download--saveDir <saveDir> - Download directory (default: ffmpegDownloadOutput)--ffmpegFile <ffmpegFile> - Custom FFmpeg executable path--maxConcurrentTasks <maxConcurrentTasks> - Max concurrent downloads (default: 3)-p, --printInputFileTemplate - Show input file formatExecute git commands across multiple repositories:
zbox git -d ./repo1 ./repo2 ./repo3 -c "status"
zbox git -d ./projects/* -c "pull origin main"
zbox git -d ./projects/* -c "add . && git commit -m 'Batch update'"
Options:
-d, --dirs <dirs...> - Directories to operate on-c, --command <command> - Git command to executeMerge current branch to QA branch:
zbox qa
zbox qa -b staging -m develop
Options:
-b, --branch <branch> - Target branch (default: qa)-m, --master <master> - Master branch name (default: master)Delete merged local branches:
zbox deleteMergedLocalBranches
Deploy files to remote servers with incremental upload:
# Use default config
zbox scp
# Use custom config with git check
zbox scp -c ./my-config.js -g
# Print configuration template
zbox scp -p
Options:
-c, --config <configPath> - Configuration file path (default: ./publishConfig.js)-g, --gitCommitCheck - Check git commit status before upload-p, --printDemoConfig - Print configuration templateStart a local HTTP server:
# Default server on port 3000
zbox http
# Custom port
zbox http -p 8080
# Custom response
zbox http -p 3000 -s "Hello World"
Options:
-p, --port <port> - Port number (default: 3000)-s, --response <response> - Custom response bodyzbox ke url2ApiCode
# Encrypt sensitive documents
zbox file en ./documents -o ./secure_docs
# Download video playlist
zbox file ffmpegDownloadM3u8 -u "https://example.com/playlist.m3u8" -s "movie.mp4"
# Batch rename files for privacy
zbox file rr -p ./photos -a 1 --base64
# Check status across multiple projects
zbox git -d ./project1 ./project2 -c "status"
# Pull latest changes for all repositories
zbox git -d ./projects/* -c "pull origin main"
# Release to QA environment
zbox qa -b qa -m main
# Deploy with git status check
zbox scp -c ./deploy-config.js -g
# Start development server
zbox http -p 8080
You can also use zbox-cli programmatically in your Node.js projects:
const { fileUtils, gitUtils } = require('zbox-cli');
// File encryption
await fileUtils.encryptFiles(inputPath, outputPath, password);
// Git operations
const results = await gitUtils.batchGitCommand(
['./repo1', './repo2'],
'status',
{ parallel: true }
);
// SCP deployment
const scpUtils = require('zbox-cli/src/command/scp');
await scpUtils.deploy('./publishConfig.js', true);
Create a publishConfig.js file:
module.exports = {
host: 'your-server.com',
username: 'deploy-user',
password: 'your-password', // or use privateKey
remotePath: '/var/www/html',
localPath: './dist',
exclude: ['node_modules', '.git', '*.log']
};
Clone the repository and install dependencies:
git clone https://github.com/1061186575/zbox-cli
cd zBox
npm install
npm test - Run testsnpm run lint - Lint codenpm run lint:fix - Fix linting issuesnpm run format - Format code with Prettiernpm run release - Publish to npmnpm link
zbox --help
git checkout -b feature/amazing-feature)git commit -m 'Add some amazing feature')git push origin feature/amazing-feature)This project is licensed under the MIT License - see the LICENSE file for details.
If you encounter any issues or have questions:
Made with ❤️ for developers who love automation and efficiency
FAQs
A collection of utility tools for file/git/scp operations, and more
The npm package zbox-cli receives a total of 557 weekly downloads. As such, zbox-cli popularity was classified as not popular.
We found that zbox-cli demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.