Research
Security News
Malicious npm Package Targets Solana Developers and Hijacks Funds
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
ftp-loader is a tool to download from and upload data files to FTP server. It is intended to use in projects with large data files. Data files are bad candidates for version control managment systems. They are better to be placed at FTP server and be downloaded on demand.
The suggested workflow is the following. Data files are placed in folders added to gitignore. ftp-config.toml file is used to maintain list of data files and their locations both at project folder and FTP. This is default name, but other *.toml files can be used to split file index into separate parts. Files can be compressed.
pip install ftp-loader
ftp-loader -h
Shows help.
ftp-loader [--overwrite] [ftp-config.toml]
Downloads and extracts data from FTP server. Index file name is optional. Default index file - ftp-config.toml.
ftp-loader --upload [--overwrite] [ftp-config.toml]
Compresses and uploads data to FTP server. Index file name is optional. Default index file - ftp-config.toml.
--overwrite
Option instructs to overwrite existing files.
--check FTP_URL
Checks user's initial path at ftp server.
--base-path BASE_PATH
Specifies initial path at ftp.
When user logs in its path can be different from the path to FTP root. In this case path to FTP's root must be specified. This can be done in two ways.
By specifying --base-path parameter in command line.
By setting base path in the configuration file. The configuration file must have
name .ftp-loader-config.json
located at the user's home directory.
It must contain "hosts" key with a dictionary of hosts and corresponding paths.
For example:
{
"hosts": {
"server.ftp.ru": "/home/path1"
}
}
Index file must contain the following parameters:
FTP server URL.
url = "server.ftp.ru"
Path to project's folder at FTP. For now only Unix-style is supported.
path = "/projects/test-data"
List of files to be transferred. It is a list of file groups. Each group contain 3 or 4 parameters:
[[files]]
dst = "work" # Destination folder name.
src = "storage" # Source folder name relative to 'path'.
arch = "bz2" # Optional. Archive type. Supported archive formats:
# gz, bz2
names = [ # list of file names.
file1.txt,
file2.csv
]
Every group of files starts with [[files]]
header. The number of groups
is arbitrary.
Example of index file can be found in tests folder - ftp-config.toml.
FAQs
A package to download project data files from FTP
We found that ftp-loader demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
Security News
Research
Socket researchers have discovered malicious npm packages targeting crypto developers, stealing credentials and wallet data using spyware delivered through typosquats of popular cryptographic libraries.
Security News
Socket's package search now displays weekly downloads for npm packages, helping developers quickly assess popularity and make more informed decisions.