
Research
Malicious npm Packages Impersonate Flashbots SDKs, Targeting Ethereum Wallet Credentials
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
@kdcloudjs/create-kdesign-app
Advanced tools
开始开发之前,请您先确保已经在本地安装好了 node
,然后运行以下命令安装命令行工具:
$ npm i -g @kdcloudjs/create-kdesign-app
我们使用刚才安装的 create-kdesign-app 来快速初始化脚手架,并提供多种模板
$ create-kdesign-app
$ #? Please input the project name: my-app # 输入项目名称
$ #? What template do you need? umi3... # 选择模板
$ Initializing the KDesign App # 开始初始化项目
$ Receiving objects stage 100% complete # 等待接收完成
$ Initializing Done # 完成
安装依赖:
# 注:umi3默认使用npm, umi4默认使用pnpm, 可在config/config.ts中修改
$ cd my-app && npm install
安装好脚手架后就可以开始开发
$ npm run start
![]() IE / Edge | ![]() Firefox | ![]() Chrome | ![]() Safari | ![]() iOS Safari | ![]() Samsung | ![]() Opera |
---|---|---|---|---|---|---|
IE11, Edge | last 2 versions | last 2 versions | last 2 versions | last 2 versions | last 2 versions | last 2 versions |
Create-KDesign-App 使用了 Apache License, Version 2.0. 详细license 请查看 LICENSE
FAQs
KDesign-Pro 命令行工具
The npm package @kdcloudjs/create-kdesign-app receives a total of 3 weekly downloads. As such, @kdcloudjs/create-kdesign-app popularity was classified as not popular.
We found that @kdcloudjs/create-kdesign-app demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 16 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
Security News
Ruby maintainers from Bundler and rbenv teams are building rv to bring Python uv's speed and unified tooling approach to Ruby development.
Security News
Following last week’s supply chain attack, Nx published findings on the GitHub Actions exploit and moved npm publishing to Trusted Publishers.