
Research
Malicious npm Packages Impersonate Flashbots SDKs, Targeting Ethereum Wallet Credentials
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
@makeitdev/shared
Advanced tools
A shared library for makeitdev. Provides utility functions commonly used between client and server sides.
npm install @makeit/shared
src/
├── index.ts # Main entry point
├── client/ # Client-side utilities
│ ├── index.ts
│ ├── contexts/
│ │ └── supabaseAuth.tsx
│ ├── hooks/
│ │ └── supabaseAuth.ts
│ └── utils/
│ ├── supabase.ts
│ └── utils.ts
└── server/ # Server-side utilities
├── index.ts
└── utils/
├── accountLinking.ts
├── auth.ts
├── middleware.ts
├── profile.ts
├── roles.ts
├── signup.ts
├── supabase.ts
└── utils.ts
The following environment variables are required for the server-side utilities:
# Supabase Configuration
NEXT_PUBLIC_SUPABASE_URL=your_supabase_project_url
NEXT_PUBLIC_SUPABASE_ANON_KEY=your_supabase_anon_key
SUPABASE_SERVICE_ROLE_KEY=your_supabase_service_role_key
# Required for JWT verification in getVerifiedUserFast()
SUPABASE_JWT_SECRET=your_supabase_jwt_secret
import { formatDate, validateEmail } from '@makeit/shared'
import { formatDate, formatCurrency } from '@makeit/shared/client'
const date = formatDate(new Date())
const price = formatCurrency(1000000)
import { validateEmail, generateSlug } from '@makeit/shared/server'
const isValidEmail = validateEmail('user@example.com')
const slug = generateSlug('안녕하세요! Hello World!')
# Install dependencies
npm install
# Development mode (file change detection)
npm run dev
# Build
npm run build
# Release (version update + tag creation + push)
npm run release
npm run release
npm version patch
MIT
FAQs
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
Security News
Ruby maintainers from Bundler and rbenv teams are building rv to bring Python uv's speed and unified tooling approach to Ruby development.
Security News
Following last week’s supply chain attack, Nx published findings on the GitHub Actions exploit and moved npm publishing to Trusted Publishers.