
Research
/Security News
9 Malicious NuGet Packages Deliver Time-Delayed Destructive Payloads
Socket researchers discovered nine malicious NuGet packages that use time-delayed payloads to crash applications and corrupt industrial control systems.
@expressjs/codemod
Advanced tools
Express.js provides Codemod transforms to help you upgrade your express server when a feature is deprecated or removed.
Codemods are transformations that run on your codebase programmatically. This allows for a large amount of changes to be applied without having to manually go through every file.
You don't need to install this package, run the following command:
npx @expressjs/codemod # or pnpx, bunx, etc.
or install globally:
npm i -g @expressjs/codemod # or pnpm, bun, etc.
Use @expressjs/codemod -h to explore available command-line options.
Usage: @expressjs/codemod [codemod] [source] [options]
Options:
-v, --version Output the current version of @expressjs/codemod.
-d, --dry Dry run (no changes are made to files)
-p, --print Print transformed files to stdout
--verbose Show more information about the transform process
--silent Don't print anything to stdout
-h, --help Display this help message.
Commands:
upgrade [options] [source] Upgrade your express server to the latest
version.
All the available codemods to update your express server:
Transform the deprecated magic string "back"
Transform the methods to their pluralized versions
Transform the deprecated signatures in Express v4
Change request.param() to dedicated methods
The Express.js project welcomes all constructive contributions. Contributions take many forms, from code for bug fixes and enhancements, to additions and fixes to documentation, additional tests, triaging incoming pull requests and issues, and more!
See the Contributing Guide for more technical details on contributing.
FAQs
Codemods for updating express servers.
The npm package @expressjs/codemod receives a total of 234 weekly downloads. As such, @expressjs/codemod popularity was classified as not popular.
We found that @expressjs/codemod demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 3 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
Socket researchers discovered nine malicious NuGet packages that use time-delayed payloads to crash applications and corrupt industrial control systems.

Security News
Socket CTO Ahmad Nassri discusses why supply chain attacks now target developer machines and what AI means for the future of enterprise security.

Security News
Learn the essential steps every developer should take to stay secure on npm and reduce exposure to supply chain attacks.