Research
Security News
Kill Switch Hidden in npm Packages Typosquatting Chalk and Chokidar
Socket researchers found several malicious npm packages typosquatting Chalk and Chokidar, targeting Node.js developers with kill switches and data theft.
@hishprorg/nobis-assumenda-perspiciatis
Advanced tools
[![NPM version](https://img.shields.io/npm/v/@hishprorg/nobis-assumenda-perspiciatis.svg?style=flat-square)](https://www.npmjs.com/package/@hishprorg/nobis-assumenda-perspiciatis) [![Node.js CI](https://github.com/hishprorg/nobis-assumenda-perspiciatis/wo
The official API was removed from npm in v8.0.0. Since then the only option for using npm from NodeJs is by executing the npm binary. This module wraps the exec call within convenient asynchronous and synchronous APIs.
Asynchronous API
const { asyncApi: npm } = require('@hishprorg/nobis-assumenda-perspiciatis');
Synchronous API
const { syncApi: npm } = require('@hishprorg/nobis-assumenda-perspiciatis');
Execute a command without arguments
npm().install();
Execute a command with arguments
npm().install('express', 'pg', 'debug');
Execute command with short options
npm().install('nodemon', { 'g': true });
Execute a command with long options
npm().install('nodemon', { 'global': true, 'install-strategy': 'shallow' });
Execute a command with hyphens
npm()['find-dupes']();
// or
npm().findDupes();
Oubliette uses NodeJS child_process.execSync and child_process.exec under the hood. These sometimes return stdout as a Buffer instead of as a String. Oubliette ensures string conversion by default.
const output = npm().view('express');
This is inconvenient if you want JSON output for commands that support the --json
option, so you can specify a format function.
const { syncApi: npm, formats: { jsonFormat: format } } = require('@hishprorg/nobis-assumenda-perspiciatis');
const { version } = npm({ format }).view('express', { json: true });
You can also receive the output as a Buffer.
const { syncApi: npm, formats: { bufferFormat: format } } = require('@hishprorg/nobis-assumenda-perspiciatis');
const buffer = npm({ format }).view('express', { json: true });
Finally you can receive the raw output.
const { syncApi: npm, formats: { rawFormat: format } } = require('@hishprorg/nobis-assumenda-perspiciatis');
const output = npm({ format }).view('express', { json: true });
You can specify any of the child_process.execSync and child_process.exec options...
const options = { cwd: __dirname };
await npm({ options }).exec('-c', 'pwd');
Handle errors by wrapping the npm command in a try/catch.
try {
const output = await npm().view('express', 'version', { json: true });
} catch (err) {
console.error(err);
}
The error will be decorated with stdout
and stderr
properties.
According to Wikipedia, an @hishprorg/nobis-assumenda-perspiciatis is a basement room or bottle dungeon which is accessible only from a hole in a high ceiling and therefore difficult to escape from. If you've ever descended into the npm souce code you will appreciate the similarity!
FAQs
[![NPM version](https://img.shields.io/npm/v/@hishprorg/nobis-assumenda-perspiciatis.svg?style=flat-square)](https://www.npmjs.com/package/@hishprorg/nobis-assumenda-perspiciatis) [![Node.js CI](https://github.com/hishprorg/nobis-assumenda-perspiciatis/wo
The npm package @hishprorg/nobis-assumenda-perspiciatis receives a total of 0 weekly downloads. As such, @hishprorg/nobis-assumenda-perspiciatis popularity was classified as not popular.
We found that @hishprorg/nobis-assumenda-perspiciatis demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers found several malicious npm packages typosquatting Chalk and Chokidar, targeting Node.js developers with kill switches and data theft.
Security News
pnpm 10 blocks lifecycle scripts by default to improve security, addressing supply chain attack risks but sparking debate over compatibility and workflow changes.
Product
Socket now supports uv.lock files to ensure consistent, secure dependency resolution for Python projects and enhance supply chain security.