
Security News
Re-Enabled GitHub Actions Expose Thousands of Repositories to Mini Shai-Hulud
Two compromised GitHub Actions were re-enabled with malicious tags intact, exposing thousands of downstream repositories to Mini Shai-Hulud.
@macro-plugin/jest
Advanced tools
Macro Plugin integration for jest. It supports transform macros and typescript and also jsx.
# if you use npm
npm i -D @macro-plugin/jest
# if you use pnpm
pnpm i -D @macro-plugin/jest
# if you use yarn
yarn add -D @macro-plugin/jest
jest.config.js:
module.exports = {
transform: {
'^.+\\.(t|j)sx?$': '@macro-plugin/jest',
},
}
It will load the configuration from macros.config.js or macros.config.ts by default. You can also customize it:
const fs = require('fs')
const config = require('./macros.config.js')
module.exports = {
transform: {
'^.+\\.(t|j)sx?$': ['@macro-plugin/jest', { ...config, /* custom configuration in Jest */ }],
},
}
macros.config.ts:
import { defineConfig } from "@macro-plugin/core"
export default defineConfig({
macros: [],
emitDts: true,
jsc: {
parser: {
syntax: "typescript"
},
target: "esnext",
},
})
Or with commonjs
macros.config.js
/** @type {import("@macro-plugin/core").Config} */
module.exports = {
macros: [],
emitDts: true,
jsc: {
parser: {
syntax: "typescript"
},
target: "esnext",
},
}
MIT
FAQs
Macro Plugins integration for jest
The npm package @macro-plugin/jest receives a total of 0 weekly downloads. As such, @macro-plugin/jest popularity was classified as not popular.
We found that @macro-plugin/jest demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.

Security News
Two compromised GitHub Actions were re-enabled with malicious tags intact, exposing thousands of downstream repositories to Mini Shai-Hulud.

Research
/Security News
A malicious Firefox extension fetches its payload after installation to evade detection, steal Google session cookies, and automate account takeover.

Research
/Security News
The compromise affects MemTensor's MemOS, an open source memory framework for large language models (LLMs) and AI agents. Both npm package @memtensor/memos-cloud-openclaw-plugin and the PyPI package MemoryOS are compromised. They drop cross-platform Go binaries that exfiltrate developer secrets.