maxgfr

React2Shell vulnerable versions list for use with package-checker.sh.

Note: This JSON file is intended only for Next.js projects using React Server Components. It provides a list of vulnerable versions to help detect affected packages in your project.

GitHub: https://github.com/maxgfr/package-checker.sh

Run the scan with:

curl -sS https://raw.githubusercontent.com/maxgfr/package-checker.sh/refs/heads/main/script.sh | bash -s -- --source https://gist.githubusercontent.com/maxgfr/e0ea8a2cabc53ed476cabda4709f6bd6/raw/633a44792d783f63156296fedcdb5cd37dfe0d85/react2shell_vuln.json

maxgfr

Shai-Hulud Second Coming Vulnerability Checker

A lightweight shell script to detect vulnerable npm packages related to the Shai-Hulud "Second Coming" supply chain attack.

What it does

This script recursively scans your entire Node.js monorepo or project for packages that match the vulnerable versions listed in:

• Tenable's official database (JSON format)
• Datadog's Indicators of Compromise (CSV format)

maxgfr

rm -rf ~/Library/Caches/* && sudo rm -rf /Library/Caches/* /System/Library/Caches/* && killall Finder

maxgfr

"use client";

import * as React from "react";
import { ChevronLeft, ChevronRight } from "lucide-react";
import { DayPicker } from "react-day-picker";
import { format } from "date-fns";

import { cn } from "~/lib/utils";
import { buttonVariants } from "~/components/ui/button";
import { fr } from "date-fns/locale";

maxgfr

sudo -i
mdutil -Ea
mdutil -ai off
mdutil -ai on

maxgfr

// Désactive toutes les restrictions de copier-coller
document.addEventListener('copy', function(e) {
    e.stopPropagation();
}, true);

document.addEventListener('paste', function(e) {
    e.stopPropagation();
}, true);

document.addEventListener('cut', function(e) {

maxgfr

export enum EventType {
  SEND_RESULT_EVENT = "sendResultEvent",
  SEND_RANDOM_ITEM = "sendRandomItem",
}

export type CallbackEventType = {
  [EventType.SEND_RESULT_EVENT]: (isEligible: boolean) => void;
  [EventType.SEND_RANDOM_ITEM]: (valueA: string, valueB: number) => void;
};

maxgfr

Migrate files from azure storage to s3 using cli

Dowload files from azure

mkdir toto && cd toto
az storage blob download-batch --account-name account_name --account-key account_key --source bucket_name --destination . --pattern "*" 

Upload to S3

maxgfr

export type CamelCase<S extends string> =
  S extends `${infer P1}_${infer P2}${infer P3}`
    ? `${Lowercase<P1>}${Uppercase<P2>}${CamelCase<P3>}`
    : Lowercase<S>;

export type KeysToCamelCase<T> = {
  [K in keyof T as CamelCase<string & K>]: T[K] extends {}
    ? KeysToCamelCase<T[K]>
    : T[K];
};

maxgfr

const getValue = <TObj, Tkey extends keyof TObj> (obj: TObj, key: Tkey) => obj[key]

const result = getValue({a: "hello", b: 2, c: true}, "a")

console.log(result) // defined as string

const result2 = getValue({a: "hello", b: 2, c: true}, "b")

console.log(result2) // defined as number