
Research
/Security News
10 npm Typosquatted Packages Deploy Multi-Stage Credential Harvester
Socket researchers found 10 typosquatted npm packages that auto-run on install, show fake CAPTCHAs, fingerprint by IP, and deploy a credential stealer.
@by-association-only/slate-env
Advanced tools
Manages the environment variables which are needed by Slate to interact with Shopify servers.
Manages the environment variables which are needed by Slate to interact with Shopify servers. Can create and run .env files used to store Slate environment variables for development.
By default, Slate will look for a .env file with environment variables.
Alternatively, users can specify --env with slate-tools scripts to use associated .env.{env} file. For example:
$ slate-tools start --env=production
will look for a .env.production file.
# The myshopify.com URL to your Shopify store
SLATE_STORE=
# The API password generated from a Private App
SLATE_PASSWORD=
# The ID of the theme you wish to upload files to
SLATE_THEME_ID=
# A list of file patterns to ignore, with each list item separated by ':'
# These patterns are relative to the `dist/` directory of your project. Slate
# performs a number of transformations to files in the `src/` before exporting
# them to `dist/`, so the best way to make sure a file will be ignored is to run
# `node node_modules/.bin/slate-tools build` or `yarn build` and inspect the
# contents for the `dist/` directory for files you wish to ignore.
SLATE_IGNORE_FILES=
# The email of the user to register for Slate analytics. Skips prompt for email.
SLATE_USER_EMAIL=
Knowing what to put in your .env isn't always straightforward. This guide aims to clarify what data is needed, and where to get it.
Note: ThemeKit is the tool that powers Slate deploys. See it's configuration variables documentation for more details.
_warning: some commands (start, deploy) will overwrite the existing code on this SLATE_THEME_ID with your local project's content.
To avoid losing work, we suggest you go to /admin/themes and duplicate
an existing theme to work from.
Go to your store's /admin/themes.xml,
and copy the id for the theme you would like to update:


alternatively, you can set the SLATE_THEME_ID to "live" to update the published theme
Navigate to your store's private apps page (/admin/apps/private).

Create a new private app and copy the password:

Assign the private app permissions to "Read and Write" for theme templates and theme assets:

FAQs
Manages the environment variables which are needed by Slate to interact with Shopify servers.
We found that @by-association-only/slate-env demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
Socket researchers found 10 typosquatted npm packages that auto-run on install, show fake CAPTCHAs, fingerprint by IP, and deploy a credential stealer.

Product
Socket Firewall Enterprise is now available with flexible deployment, configurable policies, and expanded language support.

Security News
Open source dashboard CNAPulse tracks CVE Numbering Authorities’ publishing activity, highlighting trends and transparency across the CVE ecosystem.