
Research
Malicious npm Packages Impersonate Flashbots SDKs, Targeting Ethereum Wallet Credentials
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
@kizzlebot/hapi-plugins
Advanced tools
Plugin to autoload plugins given relative path and glob pattern. Optionally, options.plugins[pluginName]
can be used to pass arguments to plugins
hapi-plugins
npm package in your project our plugin.
npm i @flexshopper/hapi-plugins
const server = new Hapi.Server();
server.connection();
server.register({
register: require('hapi-plugins'),
options: {
relativeTo: proccess.cwd() + '/plugins',
includes: ['path/to/**/*plugins.js'],
ignore: ['*.git'],
// plugin options
plugins: {
myPlugin: {
host: '192.168.1.1'
}
}
}
}, (err) => {
// continue application
});
manifest style:
registrations: [
...
{
plugin: {
register: 'hapi-plugins',
options: {
relativeTo: proccess.cwd() + '/plugins',
includes: ['path/to/**/*plugins.js'],
ignore: ['*.git'],
// plugin options
plugins: {
myPlugin: {
host: '192.168.1.1'
}
}
}
}
}
];
Required
Type: array
The glob pattern you would like to include
Type: array
The pattern or an array of patterns to exclude
Type: string
The current working directory in which to search (defaults to process.cwd()
)
Type: object
key-value where key
is your plugin name (ie internals.register.attributes.name
) and value is options to pass to plugin
'use strict';
const internals = module.exports = {};
internals.register = (server, options, next) => {
// ...do stuff
return next();
};
internals.register.attributes = {
name: 'myplugin:',
version: '0.0.1'
};
FAQs
Hapi plugin to autoload other plugins.
The npm package @kizzlebot/hapi-plugins receives a total of 0 weekly downloads. As such, @kizzlebot/hapi-plugins popularity was classified as not popular.
We found that @kizzlebot/hapi-plugins demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
Security News
Ruby maintainers from Bundler and rbenv teams are building rv to bring Python uv's speed and unified tooling approach to Ruby development.
Security News
Following last week’s supply chain attack, Nx published findings on the GitHub Actions exploit and moved npm publishing to Trusted Publishers.