Security News
Research
Data Theft Repackaged: A Case Study in Malicious Wrapper Packages on npm
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
@boardroom/protocol-info
Advanced tools
Project information which will be served to display on the Boardroom Governance Portal.
This public repo contains project information which will be served to display on the Boardroom Governance Portal
Browse the Portal »
Landing
·
Discord
·
Get In Touch
All project additions and edits for information uploaded, stored, and maintained on the Boardroom Portal occur on this public Project Information repository. These docs will walk you through how to add the necessary information to this repository in a few simple steps, to get your project added to the Boardroom Portal frontend and to update its details on an ongoing basis.
Clone the repo:
$ git clone git@github.com:boardroom-inc/protocol-Info.git
Install dependencies:
$ yarn
Compile the protocol info artifact to dist
:
$ yarn build
Link the package:
$ yarn link
From hub-ui (or any other repo), use the linked package:
$ yarn link @boardroom/protocol-info
Run validation:
$ yarn validate
Cut a new release:
$ git checkout main
$ git pull
$ npx standard-version
$ yarn publish
$ git push origin main --follow-tags
Please reach out in Discord with any questions!
FAQs
Project information which will be served to display on the Boardroom Governance Portal.
The npm package @boardroom/protocol-info receives a total of 42 weekly downloads. As such, @boardroom/protocol-info popularity was classified as not popular.
We found that @boardroom/protocol-info demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Research
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
Research
Security News
Attackers used a malicious npm package typosquatting a popular ESLint plugin to steal sensitive data, execute commands, and exploit developer systems.
Security News
The Ultralytics' PyPI Package was compromised four times in one weekend through GitHub Actions cache poisoning and failure to rotate previously compromised API tokens.