Research
Security News
Malicious npm Package Targets Solana Developers and Hijacks Funds
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
.. image:: repl-demo.gif
Runs a command in a REPL <https://en.wikipedia.org/wiki/Read-eval- print_loop>
. It comes in very handy when dealing with applications that do
not ship with a REPL, but could benefit greatly from one (such as git).
Tab completion is available and completes filenames.
Set an alias in your shell's start-up file:
alias rg="repl git"
Instead of typing git ...
, type rg
once. You'll never go back.
repl
must be installed from PyPI_
.. _git: https://git-scm.com .. _PyPI: http://pypi.python.org.
Running repl COMMAND ARG1 ARG2...
will start the loop. Any line entered
will now be appended to COMMAND ARG1 ARG2...
and executed. The result is
displayed and repl
will wait for the next line to be entered.
Try repl --help
for a list of options.
Exiting
To quit the REPL, send an ``EOF`` symbol (usually done with ``Ctrl-d`` on *nix
systems, ``Ctrl-z`` on Windows).
Command substitution
If you run into a command that needs arguments passed somewhere in between
other arguments by passing {}
as the argument. It will be replaced with
…
in the prompt.
.. code-block:: sh
$ repl echo Hello, {} - Nice to meet you!
echo Hello, … - Nice to meet you!>> Alice
Hello, Alice - Nice to meet you!
echo Hello, … - Nice to meet you!>> Bob
Hello, Bob - Nice to meet you!
echo Hello, … - Nice to meet you!>>
Idea stolen from https://github.com/defunkt/repl, which unfortunately is unmaintained. Originally rewritten because I had issues with stdin/stdout; now it boasts a few extra features (and does not require ruby)
FAQs
Run command as REPL-environment (useful for git!).
We found that repl demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
Security News
Research
Socket researchers have discovered malicious npm packages targeting crypto developers, stealing credentials and wallet data using spyware delivered through typosquats of popular cryptographic libraries.
Security News
Socket's package search now displays weekly downloads for npm packages, helping developers quickly assess popularity and make more informed decisions.