Research
Security News
Malicious npm Package Targets Solana Developers and Hijacks Funds
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
TorrentRSS is a command-line utility for downloading torrent files from an RSS feed, looking for new entries by recording the ID of the RSS item in a log file (The entry ID is MD5'd in the event that the ID is a URL).
Add this line to your application's Gemfile:
gem 'torrent_rss'
And then execute:
$ bundle
Or install it yourself as:
$ gem install torrent_rss
The primary command is torrent_rss fetch
. The command takes an array of RSS feeds and parses them for
new entries to download to a specific folder. By default, it will look for a configuration file found at
~/.torrent_rss
. This configuration file is written using TOML, and
includes the destination directory and the array of RSS feeds to query.
Example:
directory = "/opt/torrents"
feeds = [
"http://example.com/torrent.rss",
"http://example2.com/doesnt/need/rss/extension"
]
TorrentRSS also supports command-line flags that override anything set in its configuration file. By
default, that file is located at ~/.torrent_rss
, but can be overridden with the --config
flag.
Options: -f, [--feeds=one two three] # Array of Feed URLs to parse and download from -d, [--directory=DIRECTORY] # Directory to download torrent files from -c, [--config=CONFIG] # Specify the configuration file for TorrentRSS. # Default: ~/.torrent_rss
Downloaded items have their IDs MD5'd and logged in ~/.torrent_rss_log
to prevent redownloading.
torrent_rss monitor
Do you want to continuously monitor RSS feeds instead of periodically running torrent_rss fetch
? Then
you want the torrent_rss monitor
utility. The monitor will check every 60 seconds if new torrents are
ready for download. When passed the -d option, it will fork and detach as a daemon.
Questions? Issues? Want to contribute? Pull requests and issues welcome.
FAQs
Unknown package
We found that torrent_rss demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
Security News
Research
Socket researchers have discovered malicious npm packages targeting crypto developers, stealing credentials and wallet data using spyware delivered through typosquats of popular cryptographic libraries.
Security News
Socket's package search now displays weekly downloads for npm packages, helping developers quickly assess popularity and make more informed decisions.