
Research
2025 Report: Destructive Malware in Open Source Packages
Destructive malware is rising across open source registries, using delays and kill switches to wipe code, break builds, and disrupt CI/CD.
liasdfiosql
Advanced tools
Sandboxed file CLI with fixed webhook curl and safe helpers (ls/cat/find/grep/sleep).
샌드박스 디렉터리에서 안전하게 파일을 둘러보고, 고정된 웹훅으로 결과를 전송할 수 있는 경량 CLI입니다.
liasdfio ... 또는 python -m liasdfiosql ..../workspace (존재하지 않으면 생성)pip install liasdfiosql
liasdfio --help
liasdfio ls # 루트 목록
liasdfio cat path/to/file.txt # 파일 출력
liasdfio find --name "*.py" # 이름 패턴으로 찾기
liasdfio grep "TODO" --glob "*.py" -i
liasdfio sleep 2 # 최대 300초 대기
# 고정된 웹훅으로 요청 보내기 (응답 최대 1MB 출력)
liasdfio curl
# 다른 명령어 결과를 쿼리스트링(result=...)으로 전송
liasdfio curl --query-cmd ls
liasdfio curl --query-cmd grep TODO --glob "*.py"
curl은 http/https만 허용, URL은 고정됨sleep은 300초 이내만 허용python -m venv .venv
.venv\Scripts\activate
pip install -e ".[test]"
pytest
FAQs
Sandboxed file CLI with fixed webhook curl and safe helpers (ls/cat/find/grep/sleep).
We found that liasdfiosql demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
Destructive malware is rising across open source registries, using delays and kill switches to wipe code, break builds, and disrupt CI/CD.

Security News
Socket CTO Ahmad Nassri shares practical AI coding techniques, tools, and team workflows, plus what still feels noisy and why shipping remains human-led.

Research
/Security News
A five-month operation turned 27 npm packages into durable hosting for browser-run lures that mimic document-sharing portals and Microsoft sign-in, targeting 25 organizations across manufacturing, industrial automation, plastics, and healthcare for credential theft.