
Research
NPM targeted by malware campaign mimicking familiar library names
Socket uncovered npm malware campaign mimicking popular Node.js libraries and packages from other ecosystems; packages steal data and execute remote code.
@appartmint/config
Advanced tools
Config files for the @appartmint suite of npm libraries
npm i -D @appartmint/config \
&& ./node_modules/.bin/mint-config
npm i -D @appartmint/config; `
./node_modules/.bin/mint-config
npm run update
npm run upgrade
brew install git gh node \
&& brew install --cask visual-studio-code
winget install git.git; `
winget install github.cli; `
winget install openjs.nodejs.lts; `
winget install microsoft.visualstudiocode
sudo pacman -Sy git github-cli nodejs-lts-gallium code
git config --global user.email '[email]' \
&& git config --global user.name '[name]'
gh auth login
npm adduser
cd [path/to/code] && mkdir [project] && cd [project]
gh repo create [project] -c -d '[description]' -p Sunder-Apps/template --public && npm i
Use the provided npm scripts to manage your project. Check your updated package.json for more scripts you can run.
To automatically recompile your dev source files when one is changed and host it on the configured port (default is 42069), run:
npm run serve
To automatically recompile your dev source files when one is changed, run:
npm run watch
To run tests on your source files, run:
npm run test
To remove all build files, run:
npm run clean
To build all of your source files, run:
npm run prepare
This will run automatically after dependencies are installed (npm i
) and before the package is distributed (npm version [args]
).
To update the version of the package, commit changes to git, and publish the changes to npm with one command, run:
npm version [major|minor|patch] --force -m "%s - [commit message]"
"config": {
"prefix": "mint", // The library prefix of the project
"library": "mint", // The name of the library
"port": "42069", // The port to run the dev server on
"index": "index", // The name of the main bundle file
"webpack": "...", // DO NOT EDIT
"dirs": {
"doc": "docs", // Required for npm scripts
"test": "test",
"src": "src", // Required for npm scripts
"config": "config",
"imports": "imports",
"scss": "scss", // Required for npm scripts
"ts": "ts",
"dist": "dist", // Required for npm scripts
"css": "css",
"js": "js"
},
"exts": { // File extensions
"html": ".html",
"scss": ".scss",
"ts": ".ts",
"css": ".css",
"js": ".js",
"dts": ".d.ts",
"map": ".map",
"chunk": ".chunk"
}
},
FAQs
Config files for the @appartmint suite of npm libraries
The npm package @appartmint/config receives a total of 6 weekly downloads. As such, @appartmint/config popularity was classified as not popular.
We found that @appartmint/config demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Socket uncovered npm malware campaign mimicking popular Node.js libraries and packages from other ecosystems; packages steal data and execute remote code.
Research
Socket's research uncovers three dangerous Go modules that contain obfuscated disk-wiping malware, threatening complete data loss.
Research
Socket uncovers malicious packages on PyPI using Gmail's SMTP protocol for command and control (C2) to exfiltrate data and execute commands.