
Security News
/Research
Wallet-Draining npm Package Impersonates Nodemailer to Hijack Crypto Transactions
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
@directctrl/fixturelibrary
Advanced tools
Utility library making it easy to work with the open-fixture-library.
The JS/TS library for working with the open-fixture-library.
The Documentation can be found here
Via NPM: npm i fixturelibrary && npx syncOfl
syncOfl
executes a Script which then downloads all fixture definitions into the .fixturelibrary
directory and populates an index with path and sha version references. If you don't want all fixtures downloaded and are fine with downloading them during runtime you can use the shallow
parameter : npx syncOfl shallow
When new fixtures get added to the Open-Fixture-Library just run npx syncOfl
to update your index!
If his script is executed to often, you might run into the Github rate limiter and you'll have to try again after you wait some time.
For a more in depth documentation please look here: FixtureLibrary
const { FixtureLibrary } = require('fixturelibrary');
const fl = new FixtureLibrary();
const fixture = await fl.getFixture('cameo/auro-spot-300');
console.log(`${fixture.name} has ${fixture.modes.length} Modes.`);
When working with Typescript, types for the fixture and all different capabilities can be found here.
FAQs
Utility library making it easy to work with the open-fixture-library.
The npm package @directctrl/fixturelibrary receives a total of 33 weekly downloads. As such, @directctrl/fixturelibrary popularity was classified as not popular.
We found that @directctrl/fixturelibrary demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
/Research
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
Security News
This episode explores the hard problem of reachability analysis, from static analysis limits to handling dynamic languages and massive dependency trees.
Security News
/Research
Malicious Nx npm versions stole secrets and wallet info using AI CLI tools; Socket’s AI scanner detected the supply chain attack and flagged the malware.