Research
Security News
Quasar RAT Disguised as an npm Package for Detecting Vulnerabilities in Ethereum Smart Contracts
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
@blockforfun/plugin-build
Advanced tools
BlockFor.fun CLI build plugin
$ npm install -g @blockforfun/plugin-build
$ oclif-example COMMAND
running command...
$ oclif-example (-v|--version|version)
@blockforfun/plugin-build/4.0.0 win32-x64 node-v10.10.0
$ oclif-example --help [COMMAND]
USAGE
$ oclif-example COMMAND
...
oclif-example build:sqlite SOURCE TARGET
builds sqlite3 database from a BlockFor.fun git registry
USAGE
$ oclif-example build:sqlite SOURCE TARGET
ARGUMENTS
SOURCE git source repository URL or path
TARGET path to target sqlite3 database
OPTIONS
-f, --fetch=fetch git fetch repository URL
-r, --ref=ref [default: refs/heads/master] git ref to read from
-s, --spec=spec [default: refs/heads/*:refs/heads/*] git refspec to fetch
See code: src\commands\build\sqlite.js
FAQs
BlockFor.fun CLI build plugin
We found that @blockforfun/plugin-build demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
Security News
Research
A supply chain attack on Rspack's npm packages injected cryptomining malware, potentially impacting thousands of developers.
Research
Security News
Socket researchers discovered a malware campaign on npm delivering the Skuld infostealer via typosquatted packages, exposing sensitive data.