Research
Security News
Malicious npm Package Targets Solana Developers and Hijacks Funds
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
github.com/klingtnet/static-site-generator
For a real world usage example see klingtnet/klingtnet.github.io.
If you've a Go distribution installed then just run:
$ go install github.com/klingtnet/static-site-generator/cmd/ssg@latest
Otherwise you can use one of the pre build binaries from the releases page.
First you need a configuration file, for all available options refer to example.config.json
.
Second, and most important, is content. The absolute minimum is a folder containing just an index.md
. The folder structure of a more complex page is shown below:
content/
├── about-me.md
├── articles
│ ├── bye.md
│ └── hello.md
├── index.md
├── images
└── photo.webp
└── notes
└── index.md
└── something-else.md
static/
└── assets
└── base.css
For this example ssg
will generate:
[home,about,articles,notes]
articles
directory (since no index.md
was present)notes
, instead index.md
is assumed to be the list pageimages
is just copiedstatic
directory will copied as isoutput/
├── about-me.html
├── articles
│ ├── bye.html
│ ├── hello.html
│ └── index.html
├── index.html
└── notes
├── index.html
└── something-else.html
└── assets
└── base.css
Anything besides the root index.md
is optional.
Thanks to Go's excellent profiling support it is very easy to generate a CPU and memory profile. The following commands shows how to do this for a benchmark:
$ go test -cpuprofile cpu.prof -memprofile mem.prof -bench=BenchmarkGenerator ./generator/
Generated profiles can then be analyzed using pprof
, e.g. by running go tool pprof -http :9999 cpu.prof
.
Profiles should be analyzed for any performance optimization to verify if they bring a benefit or not.
FAQs
Unknown package
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
Security News
Research
Socket researchers have discovered malicious npm packages targeting crypto developers, stealing credentials and wallet data using spyware delivered through typosquats of popular cryptographic libraries.
Security News
Socket's package search now displays weekly downloads for npm packages, helping developers quickly assess popularity and make more informed decisions.