
Security News
/Research
Wallet-Draining npm Package Impersonates Nodemailer to Hijack Crypto Transactions
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
@code.gov/about-page
Advanced tools
Component for the About page on code.gov.
The repository is distributed with npm. After installing npm, you can install code-gov-about-page
with this command:
$ npm i @code.gov/code-gov-about-page
This package is meant to be used with the code-gov-front-end project. Please follow the configuration settings for the project.
You may want to view your content changes in the code-gov-about-page repo on your local machine for testing. Follow these steps to do so:
code-gov-about-page
repository.npm install
to install the dependencies required for the package in the code-gov-about-page
directory.npm link
in the root level of the code-gov-about-page
directory on your local machine.code-gov-front-end
project, clone the repository and run npm install
if you haven’t done this already.npm link @code.gov/about-page
in the root level of the code-gov-front-end directory on your local machine.You are now using the latest version of the code.gov About page section via your cloned version when running the code-gov-front-end
site on your local machine. To stop using this version, run npm unlink @code.gov/code-gov-about-page
from the root level of the code-gov-front-end
directory.
This project is in the worldwide public domain.
This project is in the public domain within the United States, and copyright and related rights in the work worldwide are waived through the CC0 1.0 Universal public domain dedication.
All contributions to this project will be released under the CC0 dedication. By submitting a pull request, you are agreeing to comply with this waiver of copyright interest.
Create a new Issue: https://github.com/GSA/code-gov-about-page/issues/new
Email: code@gsa.gov
Join our #opensource-public Slack channel: https://chat.18f.gov/
Twitter: @CodeDotGov LinkedIn: code-gov
FAQs
About page component for code.gov
The npm package @code.gov/about-page receives a total of 0 weekly downloads. As such, @code.gov/about-page popularity was classified as not popular.
We found that @code.gov/about-page demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
/Research
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
Security News
This episode explores the hard problem of reachability analysis, from static analysis limits to handling dynamic languages and massive dependency trees.
Security News
/Research
Malicious Nx npm versions stole secrets and wallet info using AI CLI tools; Socket’s AI scanner detected the supply chain attack and flagged the malware.