
Research
Malicious fezbox npm Package Steals Browser Passwords from Cookies via Innovative QR Code Steganographic Technique
A malicious package uses a QR code as steganography in an innovative technique.
@borealisgroup/eslint-config
Advanced tools
ESLint config for JS linting.
env
: Browser and Node environmentparser
: usage of babel (babel-eslint parser)create-react-app
, you have to install eslint
Note: you can still overwrite the env
, globals
and parser
in your local .eslintrc.js
.
Using npm:
npm install --save-dev @borealisgroup/eslint-config
Create a file .eslintrc.js
at the root of your project:
module.exports = {
extends: '@borealisgroup',
};
If not already done, in your editor (e.g. VSCode):
The following plugins need to be tested before being added. From awesome-eslint:
This ESLint configuration can work together with prettier, thanks to eslint-plugin-prettier
Why do we need a shared coding style accross the company?
TL;DR - For consistency, productivity and happiness.
If you want to modify plugins or rules in your project, please submit a pull request instead of overwriting your local config.
For each addition, add a justification in this README.
FAQs
ESLint config for JS linting.
The npm package @borealisgroup/eslint-config receives a total of 28 weekly downloads. As such, @borealisgroup/eslint-config popularity was classified as not popular.
We found that @borealisgroup/eslint-config demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 3 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
A malicious package uses a QR code as steganography in an innovative technique.
Research
/Security News
Socket identified 80 fake candidates targeting engineering roles, including suspected North Korean operators, exposing the new reality of hiring as a security function.
Application Security
/Research
/Security News
Socket detected multiple compromised CrowdStrike npm packages, continuing the "Shai-Hulud" supply chain attack that has now impacted nearly 500 packages.