
Research
npm Malware Targets Telegram Bot Developers with Persistent SSH Backdoors
Malicious npm packages posing as Telegram bot libraries install SSH backdoors and exfiltrate data from Linux developer machines.
@edifice.io/client
Advanced tools
Edifice TS Client exposes frameworks for interacting with entcore-based servers APIs. It is written in typescript, with minimal dependencies (rxjs and axios at the moment).
pnpm: >= 7 | 8
node: >= 16 | 18
pnpm install
pnpm run build
As rule of thumb, @edifice.io/client never uses any browser-related technology (no HTMLElement, Document, navigator...). It focus exclusively on data exchange with the servers.
IConfigurationFramework is composed of 3 layers
ISession of the connected user
INotifyFramework for async messages
ITransportFramework wraps the HTTP protocol
IExplorerFramework to look for resources
IWidgetFramework dedicated to widgets conf/prefs
and specific app frameworks for modeling their data
Browse the full API documentation here
4 additional libs are installed by the pnpm install
command.
The pnpm run build
command will populate the /dist directory
So, you'll just have to write nice documented code, and unit tests where needed !
git push --force
is not recommended!
After a git history rewrite due to a git push --force, the git tags and notes referencing the commits that were rewritten are lost.
If it happens, read this troubleshooting section: Troubleshooting
FAQs
Edifice TypeScript Client
We found that @edifice.io/client demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Malicious npm packages posing as Telegram bot libraries install SSH backdoors and exfiltrate data from Linux developer machines.
Security News
pip, PDM, pip-audit, and the packaging library are already adding support for Python’s new lock file format.
Product
Socket's Go support is now generally available, bringing automatic scanning and deep code analysis to all users with Go projects.