Security News
Research
Data Theft Repackaged: A Case Study in Malicious Wrapper Packages on npm
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
@awell-health/sol-scheduling
Advanced tools
This project contains SOL's scheduling front-end component which is used in Hosted Pages to let a patient schedule an appointment with a provider.
This repository only contains the front-end. All the logic and interaction with APIs happens within the extension and the Hosted Pages app.
Note that we use yarn PnP which might require additional configuration in your IDE to work properly. You can follow the installation instructions below to get the repository running locally.
If you use a different IDE, check the yarn documentation for instructions on IDE setup.
Follow the steps below to set up the extensions repository locally on your machine:
ctrl+shift+p
in a TypeScript fileBrowse and test all components in this repository via Storybook.
Or run yarn storybook
locally.
This repository currently uses UI components from Awell's ui-library to build the front-end faster. These components will be be unstyled if your app is not wrapped in Awell's ThemeProvider and you are not importing the styles from ui-library.
In this repository, this is handled by:
.storybook/preview.ts
<ThemeProvider />
componentFAQs
Unknown package
The npm package @awell-health/sol-scheduling receives a total of 191 weekly downloads. As such, @awell-health/sol-scheduling popularity was classified as not popular.
We found that @awell-health/sol-scheduling demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Research
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
Research
Security News
Attackers used a malicious npm package typosquatting a popular ESLint plugin to steal sensitive data, execute commands, and exploit developer systems.
Security News
The Ultralytics' PyPI Package was compromised four times in one weekend through GitHub Actions cache poisoning and failure to rotate previously compromised API tokens.