
Research
Malicious npm Packages Impersonate Flashbots SDKs, Targeting Ethereum Wallet Credentials
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
@another_works/nico-generator
Advanced tools
指定したディレクトリ配下のソースコードを読み込み、指定した文字で置換したソースコードを新たに作成するツール。
$ npx @another_works/nico-generator -b company -r employee -p ./check/modules -o ./check/modules -d
or
$ npm install -D @another_works/nico-generator
$ nico-generator -b company -r employee -p ./check/modules -o ./check/modules -d
引数名 | 説明 |
---|---|
-b | 置き換え元の文字列 |
-r | 置き換え後の文字列 |
-p | 置き換え対象ファイルがあるディレクトリ |
-o | 出力先ディレクトリ |
-d | ドライラン |
出力名 | 説明 |
---|---|
options | コマンドライン引数を構造化したもの |
config | この設定に合わせて置き換えが行われる。general = 全体設定、input = 入力設定、output = 出力設定。 |
rule | convertWordsの規則に沿って、フォルダ、ファイル名とファイルの中身の、文字列の置換が実行される(それぞれのkeyの文字列が、対応するvalueの文字列に置き換えられていく) |
targetFileList | 置き換え対象のファイル一覧 |
output file start - create file | (このファイルを元に) -> (このファイルを作成する) |
output file start - create file body | 作成されるファイルの内容 |
$ npx @another_works/nico-generator -b company -r employee -p ./check/modules -o ./check/modules
$ npm install
$ ts-node src/index.ts -b company -r employee -p ./check/modules -o ./check/modules
$ npm run test
$ npm run build
FAQs
source code generating and replacing tool.
The npm package @another_works/nico-generator receives a total of 0 weekly downloads. As such, @another_works/nico-generator popularity was classified as not popular.
We found that @another_works/nico-generator demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
Security News
Ruby maintainers from Bundler and rbenv teams are building rv to bring Python uv's speed and unified tooling approach to Ruby development.
Security News
Following last week’s supply chain attack, Nx published findings on the GitHub Actions exploit and moved npm publishing to Trusted Publishers.