
Security News
/Research
Wallet-Draining npm Package Impersonates Nodemailer to Hijack Crypto Transactions
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
@mediamonks/display-temple
Advanced tools
This is the Display Advertising Temple, used for creating Display Advertising Units for various vendors.
This is the Display.Monks Temple, used for creating display ads units for various vendors.
See documentation https://mediamonks.github.io/display-advertising-docs/index.html for documentation to getting started.
Or
View the generated documentation.
yarn add @mediamonks/display-temple
npm i -S @mediamonks/display-temple
In order to build seng-boilerplate, ensure that you have Git and Node.js installed.
Clone a copy of the repo:
git clone https://github.com/mediamonks/display-temple.git
Change to the seng-boilerplate directory:
cd seng-boilerplate
Install dev dependencies:
yarn
Use one of the following main scripts:
npm run build # build this project
npm run dev # run compilers in watch mode, both for babel and typescript
npm run test # run the unit tests incl coverage
npm run test:dev # run the unit tests in watch mode
npm run lint # run eslint and tslint on this project
npm run doc # generate typedoc documentation
When installing this module, it adds a pre-commit hook, that runs lint and prettier commands before committing, so you can be sure that everything checks out.
View CONTRIBUTING.md
View CHANGELOG.md
View AUTHORS.md
MIT © MediaMonks
Remove this section when cloning this boilerplate to a real project!
This boilerplate contains the following folders:
src/lib
, will be published to npm.yarn
.This boilerplate contains the following files:
This project uses Travis to build, test and publish its code to npm. Travis is free for public Github repositories.
It runs on all commits, shows the build status for pull requests, and publishes to npm when a new tag/release is created.
Travis only runs the npm test
script, so have configured that script
to run everything we want Travis to check. Besides the unit tests, we
also run our validations and linters.
The travis configuration is placed in a .travis.yml
file, consisting
of multiple sections.
node_js
language,
and tells travis on which node versions to run the process.Because we want to keep the npm api key secret, we add the token to the Travis Repo settings where it will be stored secure: https://docs.travis-ci.com/user/environment-variables/#Defining-Variables-in-Repository-Settings
Before we can do this, we must make sure that the repository is added to Travis, because Travis needs the repository owner/name info to make sure the encrypted values only work for that repository.
Then make sure you are logged in to your npm account with the adduser command:
$ npm adduser
To verify that you are logged in correctly you can check:
$ npm whoami
Now we need to create a new token:
npm token create
Copy the token value from the output to the Travis Environment Variable settings, and
add it with the name NPM_TOKEN
.
FAQs
This is the Display Advertising Temple, used for creating Display Advertising Units for various vendors.
We found that @mediamonks/display-temple demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 10 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
/Research
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
Security News
This episode explores the hard problem of reachability analysis, from static analysis limits to handling dynamic languages and massive dependency trees.
Security News
/Research
Malicious Nx npm versions stole secrets and wallet info using AI CLI tools; Socket’s AI scanner detected the supply chain attack and flagged the malware.