Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
pip install tlid
import tlid
# Get TLID
tlid_str = tlid.get_tlid()
print(tlid_str) # Outputs: YYMMDDHHMMSS
# Get TLID with milliseconds
tlid_milli = tlid.get_milliseconds()
print(tlid_milli) # Outputs: YYMMDDHHMMSSmmm
# Get TLID for different time granularities
print(tlid.get_seconds()) # Outputs: YYMMDDHHMMSS
print(tlid.get_minutes()) # Outputs: YYMMDDHHMM
print(tlid.get_hour()) # Outputs: YYMMDDHH
print(tlid.get_day()) # Outputs: YYMMDD
print(tlid.get_month()) # Outputs: YYMM
print(tlid.get_year()) # Outputs: YY
# Check if a string has a TLID
print(tlid.has_tlid('Hello 210101010101 World')) # Outputs: True
# Extract TLID from a string
print(tlid.extract_tlid('Hello 210101010101 World')) # Outputs: 210101010101
# Clean a string from its TLID
print(tlid.clean_tlid('Hello 210101010101 World')) # Outputs: Hello World
# Convert a TLID string to a datetime object
print(tlid.to_date('210101010101')) # Outputs: 2021-01-01 01:01:01
# pytlid
`pytlid` is a command-line interface for generating time-based identifiers using the `tlid` Python package.
## Usage
To use `pytlid`, simply run the command followed by the desired time unit. The default time unit is minutes if no argument is provided.
```sh
pytlid [unit]
Here are the available units and their corresponding outputs:
h
: Current hour in YYMMDDHH formats
: Current seconds in YYMMDDHHMMSS formatms
: Current milliseconds in YYMMDDHHMMSSmmm formatm
: Current month in YYMM formatM
: Current month in YYMM format (same as m
)y
: Current year in YY formatd
: Current day in YYMMDD formatTo get the current time in minutes:
pytlid
To get the current time in hours:
pytlid h
To get the current time in seconds:
pytlid s
For help:
pytlid --help
This will display the help message for the pytlid
command.
FAQs
A utility for creating datetime-based strings for file naming in timeline.
We found that tlid demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.