Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
###Description Ruben is an IRC chat bot written in Ruby. He is inspired, in part, by Hubot, his CoffeeScript brother from another mother.
###Dependencies
###Installation Version 1.1.0 is available from RubyGems; you can get your version of Ruben by typing
$ gem install ruben
###Getting Started
Ruben comes with a bin/ruben
executable, so you can run him with
$ ruben <server> <port> <channel> <nick>
Ruben takes a server name, port number, channel name, and nick as command line arguments. For example, if you type:
$ ruben irc.freenode.net 6667 test_chan ruben_
You should see:
$ >> USER ruben 0 * :Ruben
$ >> NICK ruben_
$ >> JOIN #test_chan
...
You can get Ruben's usage information by typing ruben -h
or ruben --help
.
###Adding Scripts
You can extend Ruben's functionality by adding scripts to /scripts
. Each script should be a .rb
file that instantiates a new Listener
object, like so:
thing_to_do lambda do
# Arcane magicks go here
end
Listener.new(/Regexp/, thing_to_do)
Ruben's listeners hear every incoming IRC message. If a listener's Regexp matches the inbound message, Ruben will call the associated lambda.
FAQs
Unknown package
We found that ruben demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.