
Security News
/Research
Wallet-Draining npm Package Impersonates Nodemailer to Hijack Crypto Transactions
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
@egodigital/nef
Advanced tools
Managed Extensibility Framework like library written for Node.js 10+, in TypeScript.
Execute the following command from your project folder, where your package.json
file is stored:
npm install --save @egodigital/nef
# install modules
npm install
# build
npm run build
You have to enable decorator feature in your tsconfig.json
file:
{
"compilerOptions": {
// ...
"experimentalDecorators": true
},
// ...
}
First define a service and a contract:
import { Export } from '@egodigital/nef';
interface IMyService {
foo(): string;
}
@Export('IMyService') // we have to use a string here, because in TypeScript, Interfaces are virtual and no objects
export class MyService implements IMyService {
public foo() {
return 'bar';
}
}
In that example MyService
is the implemented service of IMyService
contract.
Now, implement a class, which gets an instance, exported with IMyService
contract, as injected object:
import { Import } from '@egodigital/nef';
export class MyContext {
@Import('IMyService')
public service: IMyService;
}
At the end, the thing, which collects all exports and injects them into object properties, marked with @Import
decorators, is an CompositionContainer
instance:
import { CompositionContainer } from '@egodigital/nef';
let context = new MyContext();
let container = new CompositionContainer();
container.addClasses(MyService); // tell explicitly, that 'MyService' is
// a class with an '@Export' decorator
container.composeSync(context);
// now 'context.service' should
// hold an instance of 'MyService' class
// managed by 'container'
Catalogs helps to detect classes, which should be exported as services.
A catalog based on one or more JavaScript modules one application.
import { ApplicationCatalog, CompositionContainer } from '@egodigital/nef';
let container = new CompositionContainer();
container.addCatalogs(
new ApplicationCatalog(process) // add current application
);
// shorter:
// container.addApplications(process);
A catalog for a single class.
import { ClassCatalog, CompositionContainer, Export } from '@egodigital/nef';
@Export()
class MyService {
}
let container = new CompositionContainer();
container.addCatalogs(
new ClassCatalog(MyService)
);
// shorter:
// container.addClasses(MyService);
A catalog based on one or more JavaScript modules in a directory.
import { CompositionContainer, DirectoryCatalog } from '@egodigital/nef';
let container = new CompositionContainer();
container.addCatalogs(
new DirectoryCatalog('/path/to/directory')
);
// shorter:
// container.addDirectories('/path/to/directory');
A catalog based on one or more JavaScript modules in a single file.
import { CompositionContainer, FileCatalog } from '@egodigital/nef';
let container = new CompositionContainer();
container.addCatalogs(
new FileCatalog('/path/to/file.js')
);
// shorter:
// container.addFiles('/path/to/file.js');
A catalog for a JavaScript module.
import { CompositionContainer, ModuleCatalog } from '@egodigital/nef';
const myModule = require('my-module');
let container = new CompositionContainer();
container.addCatalogs(
new ModuleCatalog(myModule)
);
// shorter:
// container.addModules(myModule);
The API documentation can be found here.
FAQs
Managed Extensibility Framework like library written for Node.js
The npm package @egodigital/nef receives a total of 0 weekly downloads. As such, @egodigital/nef popularity was classified as not popular.
We found that @egodigital/nef demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 3 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
/Research
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
Security News
This episode explores the hard problem of reachability analysis, from static analysis limits to handling dynamic languages and massive dependency trees.
Security News
/Research
Malicious Nx npm versions stole secrets and wallet info using AI CLI tools; Socket’s AI scanner detected the supply chain attack and flagged the malware.