Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
@aiot-toolkit/aiotpack
Advanced tools
aiotpack
最终打包工具,包含各类语言、各类平台的打包配置
目录 | 描述 |
---|---|
config | FileLane 配置,基于此配置,可完成“源码项目-->目标代码项目-->应用程序”的完整流程 |
compiler | 目标语言-->应用程序编译器 |
loader | 源码语言-->目标代码语言 |
utils | 语言、项目无关的辅助工具 |
通过在 FileLane 中配置各项参数,可完成“源码项目-->目标代码项目-->应用程序”的完整流程
源码已生成目标代码项目,此时需要生成最终产物--应用程序。compiler 目录中的代码即为完成此项工作而生。
compiler 下的每个子目录,对应一种目标语言;每种目标语言在不同平台又可能有不同的生成方式。
因此结构为:compiler/目标语言/目标平台
,例如:
compiler/javascript/vela
--javascript 语言在 vela 平台的生成class XCompiler
, 建议实现实现ICompiler
接口,以便以后实现统一的用户端接口new XCompiler().compile({
projectPath: '',
mode: 'development',
platform: 'native'
})
FAQs
The process tool for packaging aiot projects.
We found that @aiot-toolkit/aiotpack demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.