
Research
NPM targeted by malware campaign mimicking familiar library names
Socket uncovered npm malware campaign mimicking popular Node.js libraries and packages from other ecosystems; packages steal data and execute remote code.
/!\ Fresh Paint! Still in development /!\
Generate personalized github timelines from input text
$ pip install -U contributions
contribtions
commandExample:
$ contributions --help
usage: contributions [-h] [-f {arial,KeepCalm-Medium}] [-s SPACE] [-p PIXEL]
[-l LEFT_SPACE] [-t TOP_SPACE] [--simulate] [--no-push]
text project user password gitname gitemail
Generate the most coolest github/gitlab timelines
positional arguments:
text the text to display
project the fake project to commit to
user the github/gitlab username to authenticate to
password the github/gitlab password to authenticate to
gitname the username to commit to
gitemail the user email to commit to
optional arguments:
-h, --help show this help message and exit
-f {arial,KeepCalm-Medium}, --font {arial,KeepCalm-Medium}
the font to use
-s SPACE, --space SPACE
the default space character to use
-p PIXEL, --pixel PIXEL
the default pixel character to use
-l LEFT_SPACE, --left-space LEFT_SPACE
space at left
-t TOP_SPACE, --top-space TOP_SPACE
space at top
--simulate simulat display
--no-push run without push to repo
Credits Hervé Beraud (4383)
$ # /!\ The following command need to be run 4 or 5 times /!\
$ # execute on your project by replacing by yours data
$ contributions \
BADASS \
https://github.com/4383/badass \
<your github/gitlab username> \
<your github/gitlab token> \
"Hervé Beraud" \
herveberaud.pro@gmail.com \
-l 0
FAQs
Generate the most coolest github/gitlab timelines contributions
We found that contributions demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Socket uncovered npm malware campaign mimicking popular Node.js libraries and packages from other ecosystems; packages steal data and execute remote code.
Research
Socket's research uncovers three dangerous Go modules that contain obfuscated disk-wiping malware, threatening complete data loss.
Research
Socket uncovers malicious packages on PyPI using Gmail's SMTP protocol for command and control (C2) to exfiltrate data and execute commands.