
Research
/Security News
5 Malicious Rust Crates Posed as Time Utilities to Exfiltrate .env Files
Published late February to early March 2026, these crates impersonate timeapi.io and POST .env secrets to a threat actor-controlled lookalike domain.
@cafebazaar/jaldi
Advanced tools
جَلدی (به معنای شجاعت و دلاوری) یک لایبرری برای تولید محتوای تگ application/ld+json بر اساس نوع صفحه (صفحه اصلی، اپلیکیشن، ویدئو و...) در صفحات HTML کافهبازار است.
برای نصب جلدی در پروژه خود ابتدا آن را به صورت زیر نصب کنید:
npm i @cafebazaar/jaldi
# or
yarn add @cafebazaar/jaldi
و سپس بر اساس نوع پروژه اقدام به اضافه کردن آن به پروژه خود کنید.
import jaldi from '@cafebazaar/jaldi';
// or
import { app, website } from '@cafebazaar/jaldi';
const jaldi = require('@cafebazaar/jaldi');
// or
const { app, website } = require('@cafebazaar/jaldi');
<script src="path/to/jaldi/dist/jaldi.iife.min.js"></script>
<script>
// window.jaldi is available
</script>
بعد از اینکه بر اساس نوع پروژه خود جلدی را رجیستر کردید، میتوانید از متودهای زیر استفاده کنید و آبجکت jsonLd متناسب را دریافت کنید.
const websiteLd = jaldi.website();
const corporationLd = jaldi.corporation();
const appDetailsObject = dilmaj('appDetailsV2Request', {
packageName: 'ir.divar',
});
const appLd = jaldi.app(appDetailsObject);
NOT IMPLEMENTED YET
NOT IMPLEMENTED YET
NOT IMPLEMENTED YET
FAQs
Create json-ld to used in Cafebazaar pages
The npm package @cafebazaar/jaldi receives a total of 1 weekly downloads. As such, @cafebazaar/jaldi popularity was classified as not popular.
We found that @cafebazaar/jaldi demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 6 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
Published late February to early March 2026, these crates impersonate timeapi.io and POST .env secrets to a threat actor-controlled lookalike domain.

Security News
A recent burst of security disclosures in the OpenClaw project is drawing attention to how vulnerability information flows across advisory and CVE systems.

Research
/Security News
Mixed-script homoglyphs and a lookalike domain mimic imToken’s import flow to capture mnemonics and private keys.