
Research
SANDWORM_MODE: Shai-Hulud-Style npm Worm Hijacks CI Workflows and Poisons AI Toolchains
An emerging npm supply chain attack that infects repos, steals CI secrets, and targets developer AI toolchains for further compromise.
mine
Advanced tools
This program lets you synchronize application data using Dropbox.
It automatically starts and stops programs that would otherwise fight over data in a shared folder and ensures only one instance is running. Many applications work fine when their data is stored in Dropbox, but some programs overwrite databases:
while others periodically write snapshot data:
and some just don't make sense to keep running on all your computers:
Install mine with pipx (or pip):
$ pipx install mine
or directly from the source code:
$ git clone https://github.com/jacebrowning/mine.git
$ cd mine
$ python setup.py install
Create a mine.yml in your Dropbox:
config:
computers:
- name: My iMac
hostname: My-iMac.local
address: 00:11:22:33:44:55
- name: My MacBook Air
hostname: My-MacBook-Air.local
address: AA:BB:CC:DD:EE:FF
applications:
- name: iTunes
properties:
auto_queue: false
single_instance: true
versions:
mac: iTunes.app
windows: iTunes.exe
linux: null
- name: Slack
properties:
auto_queue: true
single_instance: false
versions:
mac: Slack.app
windows: null
linux: null
Include the applications you would like mine to manage. Computers are added automatically when mine is run.
The versions dictionary identifies the name of the executable on each platform. The properties.auto_queue setting indicates mine should attempt to launch the application automatically when switching computers. The properties.single_instance setting indicates the application must be closed on other computers before another instance can start.
To synchronize the current computer's state:
$ mine
To close applications on remote computers and start them locally:
$ mine switch
To close applications running locally:
$ mine close
To close applications locally and start them on another computer:
$ mine switch <name>
To delete conflicted files in your Dropbox:
$ mine clean
FAQs
Share application state across computers using Dropbox.
We found that mine demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
An emerging npm supply chain attack that infects repos, steals CI secrets, and targets developer AI toolchains for further compromise.

Company News
Socket is proud to join the OpenJS Foundation as a Silver Member, deepening our commitment to the long-term health and security of the JavaScript ecosystem.

Security News
npm now links to Socket's security analysis on every package page. Here's what you'll find when you click through.