
Security News
Follow-up and Clarification on Recent Malicious Ruby Gems Campaign
A clarification on our recent research investigating 60 malicious Ruby gems.
This script allows you to easily automate the downloading of the latest version of any sourceforge project (as stored up to 31/12/2006) from any of sourceforge server by having it parse the web pages for the project and extract the latest release. It supports connecting through a proxy if either the environment variable HTTP_PROXY or http_proxy is defined. Also, downloads can be resumed like wget, in case the download is abruptly terminated. If .md5 checksums are available, they will also be downloaded and verified using ruby's digest/md5.
Use: srcforge -h to obtain a list of the latest command-line switches.
If on windows and using cygwin, use "srcforge.cmd".
Common Usage:
> srcforge [options] <project>
where is a valid sourceforge project, as named in the http://sourceforge.net/projects/.
The default behavior of the script is to try to to download files through a proxy if possible and to download binary files for your platform and That is, .exe's or .zip's for windows, and tar.gz files for others.
We'll use the project SCONS ( a python makefile system ) as a simple demo.
> srcforge scons
Using proxy 127.0.0.1:8118 Connecting to sourceforge... Files to download: 1) scons-0.96.92.win32.exe YES
Downloading from 'easynews.dl.sourceforge.net': scons-0.96.92.win32.exe 437641 bytes. |--------------------------------------------------------------------| ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
> srcforge scons -src
Using proxy 127.0.0.1:8118 Connecting to sourceforge... Files to download: 1) scons-src-0.96.92.tar.gz YES
Downloading from 'easynews.dl.sourceforge.net': scons-src-0.96.92.tar.gz 1375075 bytes. |--------------------------------------------------------------------| ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
> srcforge scons -all
Using proxy 127.0.0.1:8118 Connecting to sourceforge... Files to download: 1) scons-0.96.92-1.noarch.rpm YES 2) scons-0.96.92.tar.gz YES 3) scons-0.96.92.win32.exe YES 4) scons-0.96.92.zip YES 5) scons-local-0.96.92.tar.gz YES 6) scons-local-0.96.92.zip YES
Downloading from 'easynews.dl.sourceforge.net': scons-0.96.92-1.noarch.rpm 644187 bytes. .....etc....
> srcforge scons -all -ch
Using proxy 127.0.0.1:8118 Connecting to sourceforge... Files to download: 1) scons-0.96.92-1.noarch.rpm 2) scons-0.96.92.tar.gz 3) scons-0.96.92.win32.exe 4) scons-0.96.92.zip 5) scons-local-0.96.92.tar.gz 6) scons-local-0.96.92.zip
Choose one or more files to download: (Use '1 3 4' to toggle file or '3-5' for toggling a range)
1 3 1) scons-0.96.92-1.noarch.rpm YES 2) scons-0.96.92.tar.gz 3) scons-0.96.92.win32.exe YES 4) scons-0.96.92.zip 5) scons-local-0.96.92.tar.gz 6) scons-local-0.96.92.zip
Choose one or more files to download: (Use '1 3 4' to toggle file or '3-5' for toggling a range)
FAQs
Unknown package
We found that srcforge demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
A clarification on our recent research investigating 60 malicious Ruby gems.
Security News
ESLint now supports parallel linting with a new --concurrency flag, delivering major speed gains and closing a 10-year-old feature request.
Research
/Security News
A malicious Go module posing as an SSH brute forcer exfiltrates stolen credentials to a Telegram bot controlled by a Russian-speaking threat actor.