
Security News
/Research
Wallet-Draining npm Package Impersonates Nodemailer to Hijack Crypto Transactions
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
@hatiolab/things-scene
Advanced tools
Things-Scene은 웹 애플리케이션을 위한 2D 그래픽 라이브러리입니다.
# npm 사용
npm install @hatiolab/things-scene
# yarn 사용
yarn add @hatiolab/things-scene
import { Scene, Component } from '@hatiolab/things-scene'
// 씬 생성 및 렌더링
<script src="node_modules/@hatiolab/things-scene/things-scene-min.js"></script>
<script>
const { Scene, Component } = window['things-scene']
// 씬 생성 및 렌더링
</script>
이 프로젝트는 Rollup을 통해 다음 포맷으로 빌드됩니다:
포맷 | 파일명 | 용도 | 비고 |
---|---|---|---|
ESM | things-scene.mjs | 최신 브라우저 | 권장 사용 포맷 |
UMD | things-scene-min.js | 모든 환경 | 레거시 지원 및 번들링용 |
# 빌드 실행
npm run build
개발을 위한 자세한 내용은 DEVELOPMENT.md를 참조하세요.
# 개발 서버 실행
npm run serve:dev
배포 절차는 DEPLOYMENT.md를 참조하세요.
이 프로젝트는 TypeScript 타입 정의를 제공합니다. 기존 JavaScript 코드는 유지하면서 TypeScript 타입 시스템을 활용할 수 있습니다.
# 타입 검사 실행
npm run type-check
이 프로젝트는 독점 라이선스로 배포됩니다.
라이선스 정보: http://things-scene.hatiolab.com/EULA/
FAQs
2D graphic library
The npm package @hatiolab/things-scene receives a total of 2,720 weekly downloads. As such, @hatiolab/things-scene popularity was classified as popular.
We found that @hatiolab/things-scene demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
/Research
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
Security News
This episode explores the hard problem of reachability analysis, from static analysis limits to handling dynamic languages and massive dependency trees.
Security News
/Research
Malicious Nx npm versions stole secrets and wallet info using AI CLI tools; Socket’s AI scanner detected the supply chain attack and flagged the malware.