Research
Security News
Malicious npm Package Targets Solana Developers and Hijacks Funds
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
List of all URL shorteners, such as bitly, tinyurl, shorturl, and many others.
This package exposes a list of all known link shorteners (also known as URL shorteners). This can help you block or filter link shorteners. We are promoting responsible link shortening practices and trying to cut down on spam. Built by Maya from y.gy.
Latest Version: 1.12.0 released on 2024-Mar-8
Empower your website's security by using the link-shorteners package to have access to a frequently-updated list of link shorteners. Use the list to efficiently block, filter, or review well-known URL shorteners such as bitly, t.co, ow.ly, tinyurl, shorturl and more. Protect your website from re-linking spam or potential security risks.
This list empowers link shortening platforms to effectively restrict the usage of previously shortened links as replacements for destination URLs. This avoids chain shortening/unauditable re-linking, enhances security, prevents spam and enforce quality control.
link-shorteners package is open source, allowing developers (you!) to contribute and keep our list of link shorteners up-to-date.
You can install the link-shorteners
package using pip. Open your terminal and run the following command:
pip install link-shorteners
Make sure that you are always upgrading to the latest version of link-shorteners so your list of link shorteners is up-to-date!
from link_shorteners import link_shorteners_list
banned_shorteners = link_shorteners_list()
url_to_check = "https://bit.ly/abc123"
if any([x in url_to_check.lower() for x in banned_shorteners]):
print("The URL is blocked")
The source code is open sourced and is currently hosted on GitHub at: https://github.com/mayakyler/link-shorteners
We welcome contributions from the community to enhance and expand the list of link shorteners. Feel free to submit issues or pull requests to add more link shorteners, ensuring that the package remains up-to-date and comprehensive.
IMPORTANT: When updating a list of shorteners, make sure to update the
.txt
file in both the npm package and pypi package to ensure consistency.
Our motivation behind developing this package stems from our experience building y.gy, a link shortening platform. Facing challenges such as spam from various link-shortening platforms, we created this list to empower developers and platforms to efficiently block unwanted links in destination URLs. By utilizing this package, you can enhance the security and integrity of your platform, making it a safer space for users.
FAQs
List of all URL shorteners, such as bitly, tinyurl, shorturl, and many others.
We found that link-shorteners demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
Security News
Research
Socket researchers have discovered malicious npm packages targeting crypto developers, stealing credentials and wallet data using spyware delivered through typosquats of popular cryptographic libraries.
Security News
Socket's package search now displays weekly downloads for npm packages, helping developers quickly assess popularity and make more informed decisions.