Security News
Research
Data Theft Repackaged: A Case Study in Malicious Wrapper Packages on npm
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
Command line tool, which let's you switch between projects like a pro (grammer).
Each day I find myself hard switching between projects multiple times. I'll do some work in project A, some documentation in project C, in my lunchhour I code somewhat in a private project and switch back to my original project and so on. So it may be, that I just cancel my work in a project instantly and start to work on something else. That's a hard switch. Or I just have to stop whatever I'm doing currently since my cat acts like dying due hunger oder my girlfriend wants me to do the laundry or whatever reason.
After some time (in the worst case after some days) I'll get back to my project and want to continue wherever I've stopped. But I've no glue where I stopped or what was the last thing, even less what was my thoughts. So I spent some time trying to find out what I did and what to do next. You know what I mean, since you're a coder too. And of course you remember that comic why you shouldn't interrupt a programmer.
pritch is a handy tool which should help you to get back into your project or task as fast as possible. The idea behind is simple: If you stop
working on a project, type leave
in your CLI while being in the root directory of your project. pritch will ask you what you just did and
whats the next step to do if you come back to the project. You should answer them in as few words as possible but enough to understand it
again if you read it days later.
After you get back to your project a coffee, nap or even days later, type re
in your command line while being in the projects directory
and pritch will tell you what you've done before leaving and what's the next thing to do.
gem install pritch
FAQs
Unknown package
We found that pritch demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Research
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
Research
Security News
Attackers used a malicious npm package typosquatting a popular ESLint plugin to steal sensitive data, execute commands, and exploit developer systems.
Security News
The Ultralytics' PyPI Package was compromised four times in one weekend through GitHub Actions cache poisoning and failure to rotate previously compromised API tokens.