
Research
SANDWORM_MODE: Shai-Hulud-Style npm Worm Hijacks CI Workflows and Poisons AI Toolchains
An emerging npm supply chain attack that infects repos, steals CI secrets, and targets developer AI toolchains for further compromise.
usage_by_example
Advanced tools
No-code options parser that automatically detects command-line options from the usage text of your application. This intuitive parser identifies optional and required argument names as well as option names without requiring any additional code, making it easy to manage user input for your command-line applications.
Features
Example
require 'usage_by_example'
Options = UsageByExample.read(DATA).parse(ARGV)
puts Options.include_secure?
puts Options.include_verbose?
puts Options.include_retries?
puts Options.include_timeout?
puts Options.argument_retries
puts Options.argument_timeout
puts Options.argument_mode
puts Options.argument_host
puts Options.argument_port
__END__
Establishes a network connection to a designated host and port, enabling
users to assess network connectivity and diagnose potential problems.
Usage: connect [options] [mode] host port
Options:
-s, --secure Establish a secure connection (SSL/TSL)
-v, --verbose Enable verbose output for detailed information
-r, --retries NUM Specify the number of connection retries (default 3)
-t, --timeout NUM Set the connection timeout in seconds (default 10)
Arguments:
[mode] Optional connection mode (active or passive)
host The target host to connect to (e.g., example.com)
port The target port to connect to (e.g., 80)
FAQs
Unknown package
We found that usage_by_example demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
An emerging npm supply chain attack that infects repos, steals CI secrets, and targets developer AI toolchains for further compromise.

Company News
Socket is proud to join the OpenJS Foundation as a Silver Member, deepening our commitment to the long-term health and security of the JavaScript ecosystem.

Security News
npm now links to Socket's security analysis on every package page. Here's what you'll find when you click through.