Security News
Research
Data Theft Repackaged: A Case Study in Malicious Wrapper Packages on npm
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
No-code options parser that automatically detects command-line options from the usage text of your application. This intuitive parser identifies optional and required argument names as well as option names without requiring any additional code, making it easy to manage user input for your command-line applications.
Features
Installation
To use options_by_example, first install the gem by running:
gem install options_by_example
Alternatively, add this line to your Gemfile and run bundle install:
gem 'options_by_example'
Example
require 'options_by_example'
Options = OptionsByExample.read(DATA).parse(ARGV)
puts Options.include? :secure
puts Options.include? :verbose
puts Options.include? :retries
puts Options.include? :timeout
puts Options.get :retries
puts Options.get :timeout
puts Options.get :mode
puts Options.get :host
puts Options.get :port
__END__
Establishes a network connection to a designated host and port, enabling
users to assess network connectivity and diagnose potential problems.
Usage: connect [options] [mode] host port
Options:
-s, --secure Establish a secure connection (SSL/TSL)
-v, --verbose Enable verbose output for detailed information
-r, --retries NUM Number of connection retries (default 3)
-t, --timeout NUM Set connection timeout in seconds
Arguments:
[mode] Optional connection mode (active or passive)
host The target host to connect to (e.g., example.com)
port The target port to connect to (e.g., 80)
FAQs
Unknown package
We found that options_by_example demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Research
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
Research
Security News
Attackers used a malicious npm package typosquatting a popular ESLint plugin to steal sensitive data, execute commands, and exploit developer systems.
Security News
The Ultralytics' PyPI Package was compromised four times in one weekend through GitHub Actions cache poisoning and failure to rotate previously compromised API tokens.