Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Simple script for sending emails.
usage: headnode_notifier [address] [OPTION]
Simple script for email notifications. Uses gmail by default.
positional arguments:
Recipient address
optional arguments:
-h, --help show this help message and exit
-v, --version show program's version number and exit
--subject Message subject
--body Message body
--attach Attachment
--serv-addr Server address. Default <smtp.gmail.com>
--port Server's port. Default: <587>
--from-addr Account address.
--password-file Read password from exeternal file. Prevents hard-coding
password anywhere in this script. IMPORTANT! Password is
stored as plain text! Do NOT use with your personal
account!
You can specify the message subject, content and attach a file.
headnode_notifier.py recipient@domain.com --subject 'Important message' --body 'Hello there!' --attach ./some/file.zip
You can also send just blank message, only recipient@domain.com
is truly obligatory if using default values for the rest.
You can specify server, port and else if you wish with --serv-addr smpt.provider.com --port 42 --from-addr my.address@provider.com
If an option is not specified in the CLI, it is read from the headnode_notifier.config file. It is meant to facilitate the usage by setting default values for:
[server]
address = smtp.gmail.com
port = 587
[mailbox]
address =
password_file =
Config location: $HOME
Config name:
.headnode_notifier.config
In order to avoid storing the password anywhere in the script, it is read from file. You can specify the path using --password-file /path/to/file
or in the config file. Remember that the password file is plain text so use the script with caution.
Remember to allow less secure apps to connect if using gmail. You can set it on google account security page
FAQs
Simple script for sending emails
We found that headnode-notifier demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.