
Research
/Security News
10 npm Typosquatted Packages Deploy Multi-Stage Credential Harvester
Socket researchers found 10 typosquatted npm packages that auto-run on install, show fake CAPTCHAs, fingerprint by IP, and deploy a credential stealer.
@code.gov/about-page
Advanced tools
Component for the About page on code.gov.
The repository is distributed with npm. After installing npm, you can install code-gov-about-page with this command:
$ npm i @code.gov/code-gov-about-page
This package is meant to be used with the code-gov-front-end project. Please follow the configuration settings for the project.
You may want to view your content changes in the code-gov-about-page repo on your local machine for testing. Follow these steps to do so:
code-gov-about-page repository.npm install to install the dependencies required for the package in the code-gov-about-page directory.npm link in the root level of the code-gov-about-page directory on your local machine.code-gov-front-end project, clone the repository and run npm install if you haven’t done this already.npm link @code.gov/about-page in the root level of the code-gov-front-end directory on your local machine.You are now using the latest version of the code.gov About page section via your cloned version when running the code-gov-front-end site on your local machine. To stop using this version, run npm unlink @code.gov/code-gov-about-page from the root level of the code-gov-front-end directory.
This project is in the worldwide public domain.
This project is in the public domain within the United States, and copyright and related rights in the work worldwide are waived through the CC0 1.0 Universal public domain dedication.
All contributions to this project will be released under the CC0 dedication. By submitting a pull request, you are agreeing to comply with this waiver of copyright interest.
Create a new Issue: https://github.com/GSA/code-gov-about-page/issues/new
Email: code@gsa.gov
Join our #opensource-public Slack channel: https://chat.18f.gov/
Twitter: @CodeDotGov LinkedIn: code-gov
FAQs
About page component for code.gov
We found that @code.gov/about-page demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
Socket researchers found 10 typosquatted npm packages that auto-run on install, show fake CAPTCHAs, fingerprint by IP, and deploy a credential stealer.

Product
Socket Firewall Enterprise is now available with flexible deployment, configurable policies, and expanded language support.

Security News
Open source dashboard CNAPulse tracks CVE Numbering Authorities’ publishing activity, highlighting trends and transparency across the CVE ecosystem.