
Security News
/Research
Wallet-Draining npm Package Impersonates Nodemailer to Hijack Crypto Transactions
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
@ewtd/ewt
Advanced tools
$ npm i @ewtd/ewt
import {
Icon,
EmptyData,
} from '@ewtd/ewt';
import '@ewtd/ewt/dist/index.css';
安装 babel-plugin-import
插件
npm install babel-plugin-import --save-dev
.babelrc
文件配置如下
{
"plugins": [
[ "import", {
"libraryName": "@ewtd/ewt"
}
]
]
}
src/components/Template
文件夹重命名为新组件名称;src/index.ts
加入该组件;demo/index.tsx
加入新组件路由;localhost:8080/#/组件名称
,以 If
组件为例,访问地址为 localhost:8080/#/If
;npm run build:site
拷贝 dist 目录下的内容到文档站的 git 仓库 release
分支的 /dist/v2
目录下,文档站 git 仓库地址是 ssh://git@git.mistong.com:10022/ewtd/pc.git
前往发布平台搜索 pc
,找到应用名称 === pc
的站点发布即可
文档站地址是:http://eui.mistong.com/
单元测试放在组件的 __test__
目录即可,名称建议为 xxx.test.js
,以模板组件 Template
为例,其目录结构为
Template
└── __test__
└── template.test.js
npm run test // 或者 npm run coverage
// 其中 xxx 替换为组件目录即可
npx jest /src/components/xxx/__test__
FAQs
An ewt component
We found that @ewtd/ewt demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 7 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
/Research
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
Security News
This episode explores the hard problem of reachability analysis, from static analysis limits to handling dynamic languages and massive dependency trees.
Security News
/Research
Malicious Nx npm versions stole secrets and wallet info using AI CLI tools; Socket’s AI scanner detected the supply chain attack and flagged the malware.