Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
The LLUV machine (or Linux Live Usb Vending) machine is a service that allows
users to select an image from a repository and write it to a usb storage device with
an easy to use user interface. The backend uses DD so use with care. If the usb device
is allocated and writable, a block size will automatically be generated for
optimal performance.
LLUV was originally designed to run in a kiosk fashion, and read from large lists of images, both
local and remote.
Note: The DD process is completely isolated from LLUV, therefor, if a drive is corrupted,
it was probably DD's alter ego; Disk Destroyer.
lsscsi - for discovering usb storage devices
DD - for writing the image
Awk - for testing mount location
Note: lluv_simple_cli has no dependencies besides dd itself
Note:lluv needs root for storage device access
To start the lluv console run:
sudo lluv.lluvconsole This will allow an option of interfaces along with automatic
terminal resizing.
sudo lluv.cli
sudo lluv.tui Note: Terminal will not be auto resized without using lluvconsole so
the application may crash if the terminal is to small.
sudo lluv.simple_cli.py A simple lluv cli. Basically a simplified dd with a progress bar
Written using the npyscreen library.
The TUI was designed to be used as a kiosk and therefore has no quit option
(use CTRL-C) and must be used in larger terminal formats.
Edit values such as the path to the images, drives to ignore, leeway in recommended
drive capacity, and more.
By default, Images in the image directory specified in the config will be put in the No-Category
category. To create Image categories, create a subdirectory and place images of said category inside.
For example, placing fedora images in the directory /"default img path"/Fedora would render them in the
"Fedora" category. Categories will be sorted alphabetically.
Linux
1.2 = 1/26
- lluv console
- auto term resize
1.1 = 1/19
- .lluvrc
- bug fixes
- code cleanup
1.0 = 1/18
- prototype
FAQs
Front end for the linux command DD with a progress bar.
We found that lluv demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.