4 ms·
A command to recursively check for the compromised axios package version: find / -path '*/node_modules/axios/package.json' -type f 2>/dev/null | while read
by fluxist 6mo ago
A command to recursively check for the compromised axios package version:
find / -path '*/node_modules/axios/package.json' -type f 2>/dev/null | while read -l f; set -l v (grep -oP '"version"\s*:\s\*"\K(1\.14\.1|0\.30\.4)' $f 2>/dev/null); if test -n "$v"; printf '\a\n\033[1;31m FOUND v%s\033[0m \033[1;33m%s\033[0m\n' $v (string replace '/package.json' '' -- $f); else; printf '\r\033[2m scanning: %s\033[K\033[0m' (string sub -l 70 -- $f); end; end; printf '\r\033[K\n\033[1;32m scan complete\033[0m\n'
- hk__2 6mo agoOr more simply: find / -type f -path '*/node_modules/axios/package.json' \ -exec grep -Pl '"version"\s*:\s*"(1\.14\.1|0\.30\.4)"' {} + 2>/dev/null Let’s not encourage people to respond to security incidents by… copy/pasting random commands they don’t understand.
- deleted 6mo ago[deleted]
- skydhash 6mo agoWhat’s with all those escapes codes?
- sph 6mo agoscript kiddies love their ANSI color codes and fancy ASCII art