
Research
Malicious npm Packages Impersonate Flashbots SDKs, Targeting Ethereum Wallet Credentials
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
@findkit/ui
Advanced tools
See documentation at https://docs.findkit.com/ui
Get pnpm 7 and clone the repository
git clone https://github.com/findkit/findkit.git
Install node modules
cd findkit/packages/ui
pnpm install
Run
pnpm vitest
Start development server and build watcher with
pnpm dev
This will serve the files from the e2e directory.
Try http://localhost:28104/static/single-group?fdk_q=wordpress for example.
While the development server is running you can execute the Playwright tests with:
pnpm playwright-test --headed
pnpm playwright-visual --headed
Run
pnpm playwright-update
and review and commit the changes.
When you want test the changes in your project you must build the package and install it to your project.
Build everything first
pnpm build
and pack to .tgz
file
pnpm pack
This will create a file like findkit-ui-0.0.1.tgz
which can be installed to
your project. When installing it you should use the package manager your project
is using.
cd /path/to/project
npm install /path/to/findkit/clone/findkit-ui-0.0.1.tgz
Because this is a local build you must disable the CDN usage: https://docs.findkit.com/ui/advanced/disable-cdn
This package uses custom convention for private properties and methods. Every
private method and property should have the Typescript private
keyword and
PRIVATE_
prefix. The privates are mangled using esbuild when the package
is published.
The native Javascript privates cannot be used because they produce too much code when transpiled down to legacy Javascript and they are too new ship as is.
FAQs
Findkit Search UI
The npm package @findkit/ui receives a total of 47 weekly downloads. As such, @findkit/ui popularity was classified as not popular.
We found that @findkit/ui demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 3 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
Security News
Ruby maintainers from Bundler and rbenv teams are building rv to bring Python uv's speed and unified tooling approach to Ruby development.
Security News
Following last week’s supply chain attack, Nx published findings on the GitHub Actions exploit and moved npm publishing to Trusted Publishers.