
Research
Security News
Lazarus Strikes npm Again with New Wave of Malicious Packages
The Socket Research Team has discovered six new malicious npm packages linked to North Korea’s Lazarus Group, designed to steal credentials and deploy backdoors.
@enio.ai/nx-install
Advanced tools
Generator to setup command to install dependencies through npm for each project
nx-install is plugin for Nx workspaces to quickly setup a custom install command on your projects. This is especially convenient for running operations on multiple projects dynamically, like running build and test on affected projects, where installing dependencies beforehand is a prerequisite. It is created, maintained, and released as open source under MIT license by a group of passionate individuals in Enio.
Add the plugin to your Nx workspace:
npm install --save-dev @enio.ai/nx-install
Run the following command at the root directory of your workspace. If nx
is not setup globaly, you may want to add it as npm script first (see details below) or prefix with npx
when using npm. You can also run this command from the Nx Console extension for VSCode.
nx g @enio.ai/nx-install
The previous command will have installed two new scripts in your root workspace package.json.
{
"scripts": {
"nx-install": "nx nx-install",
"nx-install:affected": "nx affected --target=nx-install --all"
}
}
Then you could run the following commands, where <project>
is the name of the project in the nx workspace you want to run it for.
// Installing dependencies for target project
npm run nx-install <project>
// Installing dependencies for all affected projects
npm run nx-install:affected
Maintenance of this project is made possible by all the contributors and sponsors. If you'd like to sponsor this project and have your avatar or company logo appear below click here. 💖
(This list will be automatically generated in the future.)
FAQs
Generator to setup command to install dependencies through npm for each project
The npm package @enio.ai/nx-install receives a total of 5 weekly downloads. As such, @enio.ai/nx-install popularity was classified as not popular.
We found that @enio.ai/nx-install demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
The Socket Research Team has discovered six new malicious npm packages linked to North Korea’s Lazarus Group, designed to steal credentials and deploy backdoors.
Security News
Socket CEO Feross Aboukhadijeh discusses the open web, open source security, and how Socket tackles software supply chain attacks on The Pair Program podcast.
Security News
Opengrep continues building momentum with the alpha release of its Playground tool, demonstrating the project's rapid evolution just two months after its initial launch.