Research
Security News
Malicious npm Package Targets Solana Developers and Hijacks Funds
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
github.com/gethinode/mod-google-analytics
A Hugo module to add Google Analytics to your Hinode site
Hinode is a clean blog theme for Hugo, an open-source static site generator. Hinode is available as a template, and a main theme. This repository maintains a Hugo module to enable Google Analytics, part of the Google Marketing Platform, to a Hinode site. Visit the Hinode documentation site for installation instructions.
This module uses semantic-release to automate the release of new versions. The package uses husky
and commitlint
to ensure commit messages adhere to the Conventional Commits specification. You can run npx git-cz
from the terminal to help prepare the commit message.
[!NOTE] By convention, Hinode uses kebab case as naming convention for module names. However, the module name in the site parameters is renamed to
GoogleAnalytics
to align with Hugo's privacy settings.
Set you G-tag
in your site configuration (usually hugo.toml
) in the following section:
[services]
[services.googleAnalytics]
ID = "G-xxxxxxxxxx"
You can modify the privacy configuration in the following section:
[privacy]
[privacy.googleAnalytics]
disable = false
respectDoNotTrack = false
This module supports the following parameters (see the section params.modules
in config.toml
):
Setting | Default | Description |
---|---|---|
GoogleAnalytics.force | false | Trigger to force include the analytics scripts, bypassing other settings. Use this setting for debugging and testing only. |
FAQs
Unknown package
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
Security News
Research
Socket researchers have discovered malicious npm packages targeting crypto developers, stealing credentials and wallet data using spyware delivered through typosquats of popular cryptographic libraries.
Security News
Socket's package search now displays weekly downloads for npm packages, helping developers quickly assess popularity and make more informed decisions.