
Security News
Axios Maintainer Confirms Social Engineering Attack Behind npm Compromise
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.
bad is a command line tool that allows you to execute a command multiple times
concurrently for a given number of subjects.
It is general enough for just about anything that requires parallel execution, and it's bad enough to accomplish it with ease!
##Why the name? I couldn't think of anything better so I entered "batch command" at: http://www.portmanteaur.com/?words=batch+command+node
bad stood out :)
##Usage
Usage: bad --exec curl --for "google.com linkedin.com" --argv "-s"
Options:
-h, --help output usage information
-V, --version output the version number
--debug print information for debugging
-s, --silent show as little as possible.
--exec <command> the command to run. This is passed directly to spawn.
--for <subjects> a comma separated list of subject sets.
Each subject set is a whitespace separated list of subjects.
Subjects are appended to argv except when --to-env is given.
--argv [args] a whitespace separated list of arguments to pass to the command.
--to-env <varnames> a comma separated list of varname sets.
Each varname set is a whitespace separated list of varnames.
Varnames are mapped to the corresponding subject.
--show-time display time stats.
##Example This would silently curl the given urls concurrently:
bad --exec curl --argv '-s' --for "google.com linkedin.com npmjs.org"
##Advanced mapping
You can map subjects to an environment variable using the --to-env flag.
Consider this example:
bad --exec echo --for '1 2, 3 4 5, 6' --to-env 'FOO DOO, XOO, ZOO'
....
#FOO set to 1
#DOO set to 2
#XOO set to 3
#XOO set to 4
#XOO set to 5
#ZOO set to 6
FAQs
A CLI tool to execute a command concurrently for a given number of subjects.
The npm package bad receives a total of 38 weekly downloads. As such, bad popularity was classified as not popular.
We found that bad demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.

Security News
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.