Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Ruby random password generator.
Generate password and copy in clipboard, or generate list and/or save as .txt
file.
File is saved as plain text, it is up to end-user to decide how to secure it.
Password is generated with SecureRandom#base64
and a few (random) special characters ! # * $ % _ @
Randpass use clipboard-gem, that require xsel
or xclip
on Linux systems.
Setup script will check and install xsel
if nothing is found.
Use from terminal:
When generating a single password, you don't need any argument, or you can add number of password characters (default is 25). By default, password is printed in STDOUT and copied to clipboard, but not saved as file.
generate password with 25 characters
randpass
generate password with 30 characters
randpass 30
randpass --char 30
clear clipboard
randpass -k
randpass --clear
add -c
or --noc
to disable clipboard copy
randpass 35 -c
add -p
or --nop
to disable STDOUT
randpass 20 -p
When generating a list of passwords, you need to supply -n
or --char
to set number of password characters (default is 25). Passwords will be saved in a current working directory (unless otherwise specified) in format randpass_#{Time.now.to_i}.txt
. This way we avoid overwrite, and it's possible to get time of file generation with Time.at TIME_INTEGER
generate password list from comments (20 characters long password)
randpass -n 20 -l GitHub RubyGems AnotherWebSite
generate password list with 10 passwords - without comments
randpass -r 10
randpass -n 20 -r 10
add -s
or --nos
to disable saving list as a file
randpass -n 20 -r 5 -s
randpass -r 10 --nos --noc
add -d
or --dir
as location to store password list
randpass -r 10 -d 'my_path/directory'
gem install randpass && randpass -i
git clone git@github.com:alx3dev/randpass \
cd randpass && randpass -i
git clone https://www.github.com/alx3dev/randpass \
cd randpass && randpass -i
Tested on:
2.7.5
3.0.3
3.1.0
3.1.3
9.3.2.0
FAQs
Unknown package
We found that randpass demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.