
Research
Malicious NuGet Packages Typosquat Nethereum to Exfiltrate Wallet Keys
The Socket Threat Research Team uncovered malicious NuGet packages typosquatting the popular Nethereum project to steal wallet keys.
@geocortex/icons
Advanced tools
This project includes a collection of icons used by the Geocortex 5-series products.
Make sure to run
npm install
before commiting, as we automatically runsvgo
as a pre-commit hook to ensure the icons that are committed are optimized.
If you're simply adding a new icon you can place your .svg
file in the icons
directory. svgo
will be run automatically on commit to ensure that the icons are minified and stripped of unnecessary content. You can also use npm run optimize
to manually trigger a run of svgo
over all the icon files.
Important notes when adding icons:
map-marker.svg
=> map_marker.svg
<text>
, <linearGradient>
, etc.This step isn't necessary to add a new icon. This is only needed to debug issues with the CI build itself.
The project converts the .svg
icons to iOS .pdf
and Android .xml
equivalents. The build is done automatically on our CI server, but if you wish to build them locally you will need to install Docker.
To build the icons run the following command using (if not using a bash like terminal such as git-bash, you can remove the \
and convert the command to one line):
mkdir -p dist && \
docker build -t gcx-icons . && \
docker create --name gcx-icons gcx-icons && \
docker cp gcx-icons:/gcx/icons/. ./dist/ && \
docker rm gcx-icons
This command will:
Dockerfile
. This will include the converted iconsdist
folderdocker image rm gcx-icons
if you'd like to clean it upWe have made these icons available for you under the Apache License Version 2.0. The only thing we ask is that you not re-sell these icons.
FAQs
Icons for Geocortex products
The npm package @geocortex/icons receives a total of 69 weekly downloads. As such, @geocortex/icons popularity was classified as not popular.
We found that @geocortex/icons demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 4 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
The Socket Threat Research Team uncovered malicious NuGet packages typosquatting the popular Nethereum project to steal wallet keys.
Product
A single platform for static analysis, secrets detection, container scanning, and CVE checks—built on trusted open source tools, ready to run out of the box.
Product
Socket is launching experimental protection for the Hugging Face ecosystem, scanning for malware and malicious payload injections inside model files to prevent silent AI supply chain attacks.