
Security News
/Research
Wallet-Draining npm Package Impersonates Nodemailer to Hijack Crypto Transactions
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
@medplum/app
Advanced tools
This is the code for https://app.medplum.com
Medplum publishes the app package with placeholders for configuration settings. You can use the Medplum CLI to deploy the app, which will automatically replace the placeholders with your settings.
For example:
# Deploy the latest version of the app to your Medplum AWS environment named "staging"
medplum aws deploy-app staging
When deploying from the Medplum CLI, config settings are loaded from the corresponding JSON config file.
When building and running the app from source, config settings are loaded from environment variables or the .env
file.
Name | Description | Required |
---|---|---|
MEDPLUM_BASE_URL | The base URL of the API server for all API calls. For example, "https://api.medplum.com/". | yes |
MEDPLUM_CLIENT_ID | Optional Medplum client application ID. | no |
GOOGLE_CLIENT_ID | Optional Google client application ID for Google Auth. | no |
RECAPTCHA_SITE_KEY | Optional reCAPTCHA site key for reCAPTCHA user verification. | no |
MEDPLUM_REGISTER_ENABLED | Optional flag to enable or disable open registration for new projects. | no |
Dev server:
npm run dev
Production build:
npm run build
For more information, refer to the Developer Instructions.
FAQs
Medplum App
The npm package @medplum/app receives a total of 116 weekly downloads. As such, @medplum/app popularity was classified as not popular.
We found that @medplum/app demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 3 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
/Research
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
Security News
This episode explores the hard problem of reachability analysis, from static analysis limits to handling dynamic languages and massive dependency trees.
Security News
/Research
Malicious Nx npm versions stole secrets and wallet info using AI CLI tools; Socket’s AI scanner detected the supply chain attack and flagged the malware.