
Research
/Security News
Toptal’s GitHub Organization Hijacked: 10 Malicious Packages Published
Threat actors hijacked Toptal’s GitHub org, publishing npm packages with malicious payloads that steal tokens and attempt to wipe victim systems.
@mia-platform/eslint-config-mia
Advanced tools
The ESLint Shareable Config for Mia-Platform JavaScript Style
The package require eslint
to work, to list the correct version you can run:
npm info "@mia-platform/eslint-config-mia@latest" peerDependencies
You can run this command:
npx install-peerdeps --dev @mia-platform/eslint-config-mia
You can run this command:
(
export PKG="@mia-platform/eslint-config-mia";
npm info "${PKG}@latest" peerDependencies --json | command sed 's/[\{\},]//g ; s/: /@/g' | xargs npm install --save-dev "${PKG}@latest"
)
Which produces and runs a command like:
npm install --save-dev @mia-platform/eslint-config-mia eslint@^#.#.#
If using npm < 5, Windows users can either install all the peer dependencies manually, or use the install-peerdeps cli tool.
npm install -g install-peerdeps
install-peerdeps --dev @mia-platform/eslint-config-mia
The cli will produce and run a command like:
npm install --save-dev @mia-platform/eslint-config-mia eslint@^#.#.#
ESLint Shareable Configs are meant to work with the extends
feature of the .eslintrc
file.
You can learn more about Shareable Config on the official ESLint website.
To set up the config add a file named .eslintrc
with this content:
{
"extends": "@mia-platform/eslint-config-mia"
}
Then you can override settings from the shareable configuration by adding them directly
into your .eslintrc
file.
Or you can add this snippet in your package.json
and add the override inside the eslintConfig
object:
"eslintConfig": {
"extends": "@mia-platform/eslint-config-mia"
}
Then you can add a new script in your package.json
like this:
"scripts": {
"lint": "eslint . --ignore-path .gitignore"
}
The --ignore-path
can be ignored (🙃) if you already have a .eslintignore
file. We raccomend to use it
for avoiding to parse and lint files that will not be committed.
You want to show that you use this in your project? Feel free to add this badge to your README file.
[](https://github.com/mia-platform/eslint-config-mia)
FAQs
Mia-Platform javascript lint rules
We found that @mia-platform/eslint-config-mia demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 4 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
/Security News
Threat actors hijacked Toptal’s GitHub org, publishing npm packages with malicious payloads that steal tokens and attempt to wipe victim systems.
Research
/Security News
Socket researchers investigate 4 malicious npm and PyPI packages with 56,000+ downloads that install surveillance malware.
Security News
The ongoing npm phishing campaign escalates as attackers hijack the popular 'is' package, embedding malware in multiple versions.