Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
@fimbul/mithotyn
Advanced tools
TypeScript LanguageService plugin for the Fimbullinter project
TypeScript LanguageService Plugin that provides real-time in-editor linting while you type.
Make sure to also read the full documentation of all available modules.
npm install --save-dev @fimbul/wotan @fimbul/mithotyn
# or
yarn add -D @fimbul/wotan @fimbul/mithotyn
To enable this plugin, you need to add @fimbul/mithotyn
as plugin in your tsconfig.json
. For example:
{
"compilerOptions": {
"plugins": [
{ "name": "@fimbul/mithotyn" }
],
// your existing compilerOptions
"strict": true,
}
}
Make sure you have @fimbul/wotan
installed in the project directory or a parent directory.
To customize your in-editor linting experience you can use the following configuration options:
displayErrorsAsWarnings: boolean
: Report failures with severity error
as warning to make them distinguishable from real type errors (e.g. green instead of red squiggles in VS Code)Example:
{
"compilerOptions": {
"plugins": [
{
"name": "@fimbul/mithotyn",
"displayErrorsAsWarnings": true
}
],
// your existing compilerOptions
"strict": true,
}
}
In Visual Studio Code you can choose between the version of TypeScript that comes bundled with the editor or the local one installed in the workspace. Due to technical limitations you need to choose the workspace version to correctly pick up the plugin configured in the previous section.
TypeScript: Select TypeScript Version.
Use Workspace Version
Other editors might work the same as VS Code.
To work around this limitation there will be an editor plugin that automatically loads this LanguageService plugin. Stay tuned.
There are some limitations of the current implementation. These are subject to change in future releases.
.fimbullinter.yaml
config
optionfiles
matchingexclude
option.wotanrc.yaml
and .fimbullinter.yaml
filesApache-2.0 © Klaus Meinhardt
FAQs
TypeScript LanguageService plugin for the Fimbullinter project
The npm package @fimbul/mithotyn receives a total of 37 weekly downloads. As such, @fimbul/mithotyn popularity was classified as not popular.
We found that @fimbul/mithotyn demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.