Research
Security News
Quasar RAT Disguised as an npm Package for Detecting Vulnerabilities in Ethereum Smart Contracts
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
@hishprorg/nobis-assumenda-perspiciatis
Advanced tools
[![NPM version](https://img.shields.io/npm/v/@hishprorg/nobis-assumenda-perspiciatis.svg?style=flat-square)](https://www.npmjs.com/package/@hishprorg/nobis-assumenda-perspiciatis) [![Node.js CI](https://github.com/hishprorg/nobis-assumenda-perspiciatis/wo
The official API was removed from npm in v8.0.0. Since then the only option for using npm from NodeJs is by executing the npm binary. This module wraps the exec call within convenient asynchronous and synchronous APIs.
Asynchronous API
const { asyncApi: npm } = require('@hishprorg/nobis-assumenda-perspiciatis');
Synchronous API
const { syncApi: npm } = require('@hishprorg/nobis-assumenda-perspiciatis');
Execute a command without arguments
npm().install();
Execute a command with arguments
npm().install('express', 'pg', 'debug');
Execute command with short options
npm().install('nodemon', { 'g': true });
Execute a command with long options
npm().install('nodemon', { 'global': true, 'install-strategy': 'shallow' });
Execute a command with hyphens
npm()['find-dupes']();
// or
npm().findDupes();
Oubliette uses NodeJS child_process.execSync and child_process.exec under the hood. These sometimes return stdout as a Buffer instead of as a String. Oubliette ensures string conversion by default.
const output = npm().view('express');
This is inconvenient if you want JSON output for commands that support the --json
option, so you can specify a format function.
const { syncApi: npm, formats: { jsonFormat: format } } = require('@hishprorg/nobis-assumenda-perspiciatis');
const { version } = npm({ format }).view('express', { json: true });
You can also receive the output as a Buffer.
const { syncApi: npm, formats: { bufferFormat: format } } = require('@hishprorg/nobis-assumenda-perspiciatis');
const buffer = npm({ format }).view('express', { json: true });
Finally you can receive the raw output.
const { syncApi: npm, formats: { rawFormat: format } } = require('@hishprorg/nobis-assumenda-perspiciatis');
const output = npm({ format }).view('express', { json: true });
You can specify any of the child_process.execSync and child_process.exec options...
const options = { cwd: __dirname };
await npm({ options }).exec('-c', 'pwd');
Handle errors by wrapping the npm command in a try/catch.
try {
const output = await npm().view('express', 'version', { json: true });
} catch (err) {
console.error(err);
}
The error will be decorated with stdout
and stderr
properties.
According to Wikipedia, an @hishprorg/nobis-assumenda-perspiciatis is a basement room or bottle dungeon which is accessible only from a hole in a high ceiling and therefore difficult to escape from. If you've ever descended into the npm souce code you will appreciate the similarity!
FAQs
[![NPM version](https://img.shields.io/npm/v/@hishprorg/nobis-assumenda-perspiciatis.svg?style=flat-square)](https://www.npmjs.com/package/@hishprorg/nobis-assumenda-perspiciatis) [![Node.js CI](https://github.com/hishprorg/nobis-assumenda-perspiciatis/wo
The npm package @hishprorg/nobis-assumenda-perspiciatis receives a total of 0 weekly downloads. As such, @hishprorg/nobis-assumenda-perspiciatis popularity was classified as not popular.
We found that @hishprorg/nobis-assumenda-perspiciatis demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
Security News
Research
A supply chain attack on Rspack's npm packages injected cryptomining malware, potentially impacting thousands of developers.
Research
Security News
Socket researchers discovered a malware campaign on npm delivering the Skuld infostealer via typosquatted packages, exposing sensitive data.