
Security News
/Research
Wallet-Draining npm Package Impersonates Nodemailer to Hijack Crypto Transactions
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
@botanicastudios/netlify-cms-widget-uuid
Advanced tools
A Netlify CMS widget for generating an automatic uuid for each document
Provides a simple text input for youtube videos. Validates strings with a green text color and provides a preview image in the preview pane.
As an npm package:
npm install --save netlify-cms-widget-youtube
import youtube from "netlify-cms-widget-youtube";
CMS.registerWidget("youtube", youtubeControl, youtubePreview);
Via script
tag:
<script src="https://unpkg.com/netlify-cms-widget-youtube@^0.3.0"></script>
<script>
CMS.registerWidget('youtube', youtubeControl, youtubePreview)
</script>
Add to your Netlify CMS configuration:
fields:
- { name: <fieldname>, label: <fieldlabel>, widget: youtube, extraInfo: false, APIkey: "<KEY>" }
Enabling extraInfo
will return an object in frontmatter
<fieldname>:
url: String
id: String
mediaType: String
imageURL: String
If you provide an API KEY in the configuration you will get additional information in the Control (as seen in the screenshot above). You can use this API key here to test but it's better you get your own to make sure it always works!
You need to add an API Key to the widget settings. Learn about getting an API Key here
You need to add extraInfo: true
to your Netlify CMS configuration (usually config.yml)
For help with this widget, open an issue or ask the Netlify CMS community in Gitter.
FAQs
A Netlify CMS widget for generating an automatic uuid for each document
The npm package @botanicastudios/netlify-cms-widget-uuid receives a total of 0 weekly downloads. As such, @botanicastudios/netlify-cms-widget-uuid popularity was classified as not popular.
We found that @botanicastudios/netlify-cms-widget-uuid demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
/Research
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
Security News
This episode explores the hard problem of reachability analysis, from static analysis limits to handling dynamic languages and massive dependency trees.
Security News
/Research
Malicious Nx npm versions stole secrets and wallet info using AI CLI tools; Socket’s AI scanner detected the supply chain attack and flagged the malware.