Research
Security News
Malicious npm Package Targets Solana Developers and Hijacks Funds
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
org.bsc.util:minitemplator-repackaged
Advanced tools
MiniTemplator is a compact template engine for HTML files.
MiniTemplator is a java compact template engine.
Motivation
This project was originally born to provide an artifact available from Maven Central for project biz.source_code.MiniTemplator
<dependency>
<groupId>org.bsc.util</groupId>
<artifactId>minitemplator-repackaged</artifactId>
<version>1.4</version>
</dependency>
Example
String templateFileName = "src/test/resources/template.txt";
File f = new File(templateFileName);
MiniTemplator t =
MiniTemplator.builder()
.setSkipUndefinedVars(true)
.build(f.toURI().toURL());
t.setVariable("var1", "test");
String result = t.generateOutput();
A template engine is a software module which is used to generate HTML pages (or other text files). The layout of a HTML page is defined within a template file, which can be designed by using a standard HTML editor like FrontPage. At run-time, the application program instructs the template engine to load the template, fill in variable values, repeat blocks and produce the final HTML page.
The advantage of using a template engine, instead of embedding program code and HTML code, is:
A simple syntax is used to define variables and blocks within the template. This syntax is compatible with HTML editors like FrontPage, but it can also be used for non-HTML files.
${VariableName}
\${VariableName}
result will be
${VariableName}
<!-- $BeginBlock BlockName -->
... block content ...
<!-- $EndBlock BlockName -->
<!-- $Include RelativeFileName -->
FAQs
MiniTemplator is a compact template engine for HTML files.
We found that org.bsc.util:minitemplator-repackaged demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
Security News
Research
Socket researchers have discovered malicious npm packages targeting crypto developers, stealing credentials and wallet data using spyware delivered through typosquats of popular cryptographic libraries.
Security News
Socket's package search now displays weekly downloads for npm packages, helping developers quickly assess popularity and make more informed decisions.