
Research
Malicious fezbox npm Package Steals Browser Passwords from Cookies via Innovative QR Code Steganographic Technique
A malicious package uses a QR code as steganography in an innovative technique.
@brightsole/eslint-config-lint-front
Advanced tools
prettier and eslint are pretty great tools for writing repeatable and easy to parse code, so long as you configure them correctly. This is a very small standard setup for linting things that look like something run in a frontend environment. I like the way the output looks for the most part. This repo is here to gobble up all the deps needed to make that happen, and pipe them to a standard config.
That being said I'm not a huge fan of prettier's my way or the highway bucko mentality, and will rip it out hardcore as soon as something equally easy to use comes along that lets me do some more customization not made by me.
This repo should at the very least get you pointed in the right direction for now, however.
yarn add -D @brightsole/eslint-config-lint-front
{
"extends": "@brightsole/lint-front"
}
Then, all that's left is to add a script for linting, like the one in this repo:
...
"scripts": { "lint": "eslint . --fix" },
...
Some things to be cognizent of:
.eslintrc
..eslintignore
husky
but wrapping that in here would be wrongFAQs
eslint & prettier frontend setup
We found that @brightsole/eslint-config-lint-front demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
A malicious package uses a QR code as steganography in an innovative technique.
Research
/Security News
Socket identified 80 fake candidates targeting engineering roles, including suspected North Korean operators, exposing the new reality of hiring as a security function.
Application Security
/Research
/Security News
Socket detected multiple compromised CrowdStrike npm packages, continuing the "Shai-Hulud" supply chain attack that has now impacted nearly 500 packages.