Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
The Project is used To Extract Raw Data From a QR Code & Generate a TOTP From Secret Code Entered Via The Keyboard.
How To Use
# QR Code Decoder & TOTP Generator
mfa_decoder [-h] {--image_path, --secret} <INPUT>
Arguments | Description |
---|---|
--image_path IMAGE_PATH | Decode QR Code With <INPUT> - "Path To QR Image" |
--secret SECRET | Generate TOTP From "Secret Code" (Base32 Format) |
-h, --help | Show This Help Message and Exit |
Note: The Secret Code Here Only Accepts Strings Encoded In Base32 Format. Other Encoding Formats Like Base64, Hex, or Bytes are Not Yet Supported By This Project (Base32 Only Contains The Characters A-Z And 2-7, Without Characters Like 1, 8, 9, 0, Or Other Special Characters).
Example
Command | Output |
---|---|
# mfa_decoder --image_path C:\Users\Test\QR-Code.png | This-Is-Raw-Data-From-QR-Image |
# mfa_decoder --secret 1233214566547899870 | Invalid Secret Format. The Secret Must Be A Valid Base32 String |
# mfa_decoder --secret 3O2QUFEKB4O7PF3FEVC | 123456 |
FAQs
Decode QR Code & Generate TOTP
We found that mfa-decoder demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.