
Research
2025 Report: Destructive Malware in Open Source Packages
Destructive malware is rising across open source registries, using delays and kill switches to wipe code, break builds, and disrupt CI/CD.
anybt
Advanced tools
Introducing AnyBT, a tool for searching magnet link of all kinds of BitTorrent contents. It's based on a decentralized data protocol - Glitter Protocol.
You could use AnyBT to search for magnet links base on file names and displays search results with a simple interface.
There is also a web version of AnyBT works on ENS and IPFS available if you do not have Python environment.
To get started, please follow these steps:
Installing the tool, and you should make sure your/download/path in the $PATH, then you can use the command line tool.
pip install anybt
terms:Specifies search terms to be queried. Required:yes.
-p <page> or --page <page>:Specifies the page of results to display. Default: 0.
-l <limit> or --limit <limit>:Specifies the number of per page to display. Default: 10.
-s <sort type> or --sort <sort type>:Specifies the sorting sequence of results to display. Default: none.
hot :sort by the file heatsize :sort by the size of filedate :sort by the original publication time of the file-t <filter type> or --type <fliter type>:Specifies the category of result to display. Default: all.
video :video categories.document:document categories.image :image categories.music :music categories.software :software categories.package :package categories.anybt Chaplin
anybt "Charlie Chaplin" -p 1 -l 5
anybt "Charlie Chaplin" -s size
anybt "Charlie Chaplin" -t video
If you would like to contribute to this project, feel free to fork the repository and submit a pull request with your changes.
This project is licensed under the MIT License - see the LICENSE file for details.
FAQs
An Open Sourced Decentralized BitTorrent Search Engine
We found that anybt demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
Destructive malware is rising across open source registries, using delays and kill switches to wipe code, break builds, and disrupt CI/CD.

Security News
Socket CTO Ahmad Nassri shares practical AI coding techniques, tools, and team workflows, plus what still feels noisy and why shipping remains human-led.

Research
/Security News
A five-month operation turned 27 npm packages into durable hosting for browser-run lures that mimic document-sharing portals and Microsoft sign-in, targeting 25 organizations across manufacturing, industrial automation, plastics, and healthcare for credential theft.