Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
@chatterbug/chatterslate
Advanced tools
SlateJS editor for Chatterbug.
We use this editor at Chatterbug for our "Topic Explanations", which are mini-blog posts that teach our curriculum to students.
The editor shown above uses lots of goodies from SlateJS, including the slate-edit-table plugin.
These are "inline" edits. Chatterslate supports:
Examples of these:
"Void" blocks in Chatterslate are just easy ways to insert chars into the editor. Chatterslate comes with:
Examples of these:
Blocks are usually multiple-line content chunks. Chatterslate includes:
Examples of these:
Patterns are also blocks, but these are how we teach language concepts in a more concise + design focused way.
We do have a few tables as well as these are also useful. The editor allows adding/removing rows from the table or the entire table if necessary. Tables included are:
Run:
yarn install
Then:
yarn start
Now open http://localhost:8080
in your browser, and if you have
the LiveReload plugin installed, it'll automatically refresh for
any changes in the examples/ or src/ directories!
You'll need to be signed in via NPM first!
npm version patch # or minor or major; commits new version number
yarn release # pushes to github + npm publish
MIT. Please see LICENSE
.
FAQs
SlateJS editor for Chatterbug
The npm package @chatterbug/chatterslate receives a total of 0 weekly downloads. As such, @chatterbug/chatterslate popularity was classified as not popular.
We found that @chatterbug/chatterslate demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 3 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.