Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
@hjkcai/babel-plugin-transform-with
Advanced tools
Convert "with" statements to strict mode-compatible JavaScript
Babel plugin that turns with
statements into strict-mode JS.
this
referencesreturn
, break
, continue
yield
, await
arguments
(unlikely to be supported)Babel errors out on any with
statements during parsing by default, which can be frustrating when eventually the code will be converted anyway. This plugin implements an escape hatch using comments:
with (obj || {}) {
console.log(str);
}
// The `with` block above is equivalent to the following:
// @with
{
obj || {};
console.log(str);
}
This feature is enabled by default, but you could set alternative
option to false
to disable it.
with (obj || {}) {
console.log(str);
}
var _ref = obj || {};
(function (console, str) {
console.log(str);
})("console" in _ref ?
_ref.console :
typeof console !== "undefined" ?
console :
undefined,
"str" in _ref ?
_ref.str :
typeof str !== "undefined" ?
a :
undefined);
If there are certain variables that should be regarded as globals and excluded from the closure, there are two ways to make this possible.
The plugin accepts an exclude
option that takes an array of excluded variable names. This option applies to all with
s compiled, so it is usually more suitable to be used when the variable is a global, like Array
, Object
, process
, or console
.
If you want to tweak the excluded variables on a per-instance basis, you can use @with ignore
annotation (which works for both with () {}
construct and the alternative syntax):
var i = 0, j = 0, k = 0;
var obj = { i: 1, j: 1, k: 0 };
// @with exclude: i
with (obj) {
console.log(i, j);
}
// @with exclude: i, j
with (obj) {
console.log(i, j);
}
results in
var i = 0, j = 0, k = 0;
var obj = { i: 1, j: 1, k: 0 };
(function (console, j) {
console.log(i, j);
})("console" in obj ? obj.console : typeof console !== "undefined" ? console : undefined, "j" in obj ? obj.j : typeof j !== "undefined" ? j : undefined);
(function (console) {
console.log(i, j);
})("console" in obj ? obj.console : typeof console !== "undefined" ? console : undefined);
FAQs
Convert "with" statements to strict mode-compatible JavaScript
The npm package @hjkcai/babel-plugin-transform-with receives a total of 0 weekly downloads. As such, @hjkcai/babel-plugin-transform-with popularity was classified as not popular.
We found that @hjkcai/babel-plugin-transform-with demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.