Research
Security News
Kill Switch Hidden in npm Packages Typosquatting Chalk and Chokidar
Socket researchers found several malicious npm packages typosquatting Chalk and Chokidar, targeting Node.js developers with kill switches and data theft.
Introducing AnyBT, a tool for searching magnet link of all kinds of BitTorrent contents. It's based on a decentralized data protocol - Glitter Protocol.
You could use AnyBT to search for magnet links base on file names and displays search results with a simple interface.
There is also a web version of AnyBT works on ENS and IPFS available if you do not have Python environment.
To get started, please follow these steps:
Installing the tool, and you should make sure your/download/path
in the $PATH
, then you can use the command line tool.
pip install anybt
terms
:Specifies search terms to be queried. Required:yes.
-p <page>
or --page <page>
:Specifies the page of results to display. Default: 0.
-l <limit>
or --limit <limit>
:Specifies the number of per page to display. Default: 10.
-s <sort type>
or --sort <sort type>
:Specifies the sorting sequence of results to display. Default: none.
hot
:sort by the file heatsize
:sort by the size of filedate
:sort by the original publication time of the file-t <filter type>
or --type <fliter type>
:Specifies the category of result to display. Default: all.
video
:video categories.document
:document categories.image
:image categories.music
:music categories.software
:software categories.package
:package categories.anybt Chaplin
anybt "Charlie Chaplin" -p 1 -l 5
anybt "Charlie Chaplin" -s size
anybt "Charlie Chaplin" -t video
If you would like to contribute to this project, feel free to fork the repository and submit a pull request with your changes.
This project is licensed under the MIT License - see the LICENSE file for details.
FAQs
An Open Sourced Decentralized BitTorrent Search Engine
We found that anybt demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers found several malicious npm packages typosquatting Chalk and Chokidar, targeting Node.js developers with kill switches and data theft.
Security News
pnpm 10 blocks lifecycle scripts by default to improve security, addressing supply chain attack risks but sparking debate over compatibility and workflow changes.
Product
Socket now supports uv.lock files to ensure consistent, secure dependency resolution for Python projects and enhance supply chain security.