
Research
npm Malware Targets Telegram Bot Developers with Persistent SSH Backdoors
Malicious npm packages posing as Telegram bot libraries install SSH backdoors and exfiltrate data from Linux developer machines.
@2gis/deck2gis-layer
Advanced tools
Deck.gl layers implementations into 2gis map
Install with NPM
npm install @2gis/deck2gis-layer
Important
The current version of the
Deck2gisLayer
plugin is only compatible with thedeck.gl@^8
Import the deck2gisLayer plugin to your project and use it:
import { Deck2gisLayer, initDeck } from '@2gis/deck2gis-layer';
// Init mapgl
const map = new mapgl.Map('container', {
center: [55.31878, 25.23584],
zoom: 13,
key: 'Your API access key',
});
// Init deck.gl
const deck = initDeck(map, Deck, { antialiasing: 'msaa' });
// create Deck2gisLayer
const layer = new Deck2gisLayer<HexagonLayer<any>>({
id: 'deckgl-HexagonLayer',
deck,
type: HexagonLayer,
data,
antialiasing: true,
parameters: { depthTest: true },
radius: 480,
getPosition: (d: any) => [d.point.lon, d.point.lat],
});
// add deck layer into map
map.addLayer(deckLayer);
Deck2gisLayer uses github-flow to accept & merge fixes and improvements. Basic process is:
npm run test:screenshots
and make sure nothing is brokenPull requests with failing tests will not be accepted.
Also, if you modify packages or add them to package.json
, make sure you use npm
and update package-lock.json
.
npm run test:screenshots
npm version patch|minor|major
. This command returns a new package version. Let assume it's 1.2.3npm run deploy-gh-pages
on your local machine from a commit you want to deploy as a demo.FAQs
Deck.gl layers implementations into 2gis map
The npm package @2gis/deck2gis-layer receives a total of 100 weekly downloads. As such, @2gis/deck2gis-layer popularity was classified as not popular.
We found that @2gis/deck2gis-layer demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Malicious npm packages posing as Telegram bot libraries install SSH backdoors and exfiltrate data from Linux developer machines.
Security News
pip, PDM, pip-audit, and the packaging library are already adding support for Python’s new lock file format.
Product
Socket's Go support is now generally available, bringing automatic scanning and deep code analysis to all users with Go projects.