
Security News
Another Round of TEA Protocol Spam Floods npm, But It’s Not a Worm
Recent coverage mislabels the latest TEA protocol spam as a worm. Here’s what’s actually happening.
@medplum/app
Advanced tools
This is the code for https://app.medplum.com
Medplum publishes the app package with placeholders for configuration settings. You can use the Medplum CLI to deploy the app, which will automatically replace the placeholders with your settings.
For example:
# Deploy the latest version of the app to your Medplum AWS environment named "staging"
medplum aws deploy-app staging
When deploying from the Medplum CLI, config settings are loaded from the corresponding JSON config file.
When building and running the app from source, config settings are loaded from environment variables or the .env file.
| Name | Description | Required |
|---|---|---|
MEDPLUM_BASE_URL | The base URL of the API server for all API calls. For example, "https://api.medplum.com/". | yes |
MEDPLUM_CLIENT_ID | Optional Medplum client application ID. | no |
GOOGLE_CLIENT_ID | Optional Google client application ID for Google Auth. | no |
RECAPTCHA_SITE_KEY | Optional reCAPTCHA site key for reCAPTCHA user verification. | no |
MEDPLUM_REGISTER_ENABLED | Optional flag to enable or disable open registration for new projects. | no |
Dev server:
npm run dev
Production build:
npm run build
For more information, refer to the Developer Instructions.
FAQs
Medplum App
The npm package @medplum/app receives a total of 465 weekly downloads. As such, @medplum/app popularity was classified as not popular.
We found that @medplum/app demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 3 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Recent coverage mislabels the latest TEA protocol spam as a worm. Here’s what’s actually happening.

Security News
PyPI adds Trusted Publishing support for GitLab Self-Managed as adoption reaches 25% of uploads

Research
/Security News
A malicious Chrome extension posing as an Ethereum wallet steals seed phrases by encoding them into Sui transactions, enabling full wallet takeover.