
Research
/Security News
9 Malicious NuGet Packages Deliver Time-Delayed Destructive Payloads
Socket researchers discovered nine malicious NuGet packages that use time-delayed payloads to crash applications and corrupt industrial control systems.
Administration tool for development and devops, according to the 12factor principles as applied by @grrr-amsterdam.
Administration tool for development and devops, according to the 12factor principles as applied by Grrr
$ npm install -g 12g
$ 12g -h [command] [subcommand]
.env file$ 12g env template
This will create a copy of your local .env file, named .env.template, with all values emptied.
.env file$ 12g env get -e [target environment name] --var=DB_HOST
This will print the value from the environment variable set in the .env file on the target.
Will return undefined if the variable is not set.
.env file$ 12g env list -e [target environment name]
This will list the variables from the .env file on the target, without quotes or comments.
Target environment is probably development, staging, production, etcetera,
depending on your setup.
If the targeted environment is remote, an SSH connection will be attempted, if Capistrano configuration can be found.
Default the values will be pretty-printed, but listing in JSON is also possible:
$ 12g env list -e [target environment name] -o json
-o or --output sets the output format.
$ 12g env name
This will print out the name of the current environment.
Use 12g dock [command] to execute a Docker command directly on your Docker Compose webserver.
It has to be running and it will have to adhere to the naming standards as we use them at
@grrr-amsterdam, which is basically calling your httpd service 'web'.
Examples:
$ 12g dock bash
$ 12g dock g spawn
$ 12g dock g snippet create
You can use shorthand syntax in the provided argument for common environment names:
p becomes productions becomes stagingi becomes integrationd becomes developmentt becomes testingFor instance:
$ 12g env list -e s
To list the environment for staging.
FAQs
Administration tool for development and devops, according to the 12factor principles as applied by @grrr-amsterdam.
The npm package 12g receives a total of 58 weekly downloads. As such, 12g popularity was classified as not popular.
We found that 12g demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
Socket researchers discovered nine malicious NuGet packages that use time-delayed payloads to crash applications and corrupt industrial control systems.

Security News
Socket CTO Ahmad Nassri discusses why supply chain attacks now target developer machines and what AI means for the future of enterprise security.

Security News
Learn the essential steps every developer should take to stay secure on npm and reduce exposure to supply chain attacks.