
Research
Malicious npm Packages Impersonate Flashbots SDKs, Targeting Ethereum Wallet Credentials
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
@intouchg/fastify-webpack-hot
Advanced tools
Webpack hot reloading plugin for NodeJS Fastify server
Allows using a NodeJS Fastify server for development with Webpack hot reloading when NODE_ENV=development
Register the plugin with Fastify and set the configPath
option to the absolute filepath of your Webpack config file
Make sure the output.publicPath
option has been set in your Webpack config
yarn add fastify
yarn add --dev @intouchg/fastify-webpack-hot nodemon
// package.json
{
"scripts": {
"dev": "NODE_ENV=development nodemon -w server.js"
},
"dependencies": {
"fastify": "3.25.1"
},
"devDependencies": {
"@intouchg/fastify-webpack-hot": "latest",
"nodemon": "2.0.15"
}
}
// server.js
const fastify = require('fastify')({ logger: true })
const path = require('path')
// Only require the plugin when NODE_ENV=development.
// This is not strictly necessary, the plugin does its
// own internal check for NODE_ENV=development.
if (process.env.NODE_ENV === 'development') {
fastify.register(
require('@intouchg/fastify-webpack-hot'),
{ configPath: path.resolve(__dirname, 'webpack.config.js') }
)
}
fastify.get('/', (request, reply) => reply.send({ hello: 'world' }))
fastify.listen(3000, (error, address) => {
if (error) throw error
console.log('Fastify server is listening on ' + address)
})
FAQs
Webpack hot reloading plugin for NodeJS Fastify server
The npm package @intouchg/fastify-webpack-hot receives a total of 0 weekly downloads. As such, @intouchg/fastify-webpack-hot popularity was classified as not popular.
We found that @intouchg/fastify-webpack-hot demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
Security News
Ruby maintainers from Bundler and rbenv teams are building rv to bring Python uv's speed and unified tooling approach to Ruby development.
Security News
Following last week’s supply chain attack, Nx published findings on the GitHub Actions exploit and moved npm publishing to Trusted Publishers.