
Research
/Security News
Intercomโs npm Package Compromised in Ongoing Mini Shai-Hulud Worm Attack
Compromised intercom-client@7.0.4 npm package is tied to the ongoing Mini Shai-Hulud worm attack targeting developer and CI/CD secrets.
@mwcz/rtw-render
Advanced tools
wasm-pack-templateA template for kick starting a Rust and WebAssembly project using wasm-pack.
Built with ๐ฆ๐ธ by The Rust and WebAssembly Working Group
๐ Read this template tutorial! ๐
This template is designed for compiling Rust libraries into WebAssembly and publishing the resulting package to NPM.
Be sure to check out other wasm-pack tutorials online for other
templates and usages of wasm-pack.
cargo generate to Clone this TemplateLearn more about cargo generate here.
cargo generate --git https://github.com/rustwasm/wasm-pack-template.git --name my-project
cd my-project
wasm-pack buildwasm-pack build
wasm-pack testwasm-pack test --headless --firefox
wasm-pack publishwasm-pack publish
wasm-bindgen for communicating
between WebAssembly and JavaScript.console_error_panic_hook
for logging panic messages to the developer console.wee_alloc, an allocator optimized
for small code size.FAQs
[**๐ Read this template tutorial! ๐**][template-docs]
The npm package @mwcz/rtw-render receives a total of 20 weekly downloads. As such, @mwcz/rtw-render popularity was classified as not popular.
We found that @mwcz/rtw-render demonstrated a not healthy version release cadence and project activity because the last version was released a year ago.ย It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
Compromised intercom-client@7.0.4 npm package is tied to the ongoing Mini Shai-Hulud worm attack targeting developer and CI/CD secrets.

Research
Socket detected a malicious supply chain attack on PyPI package lightning versions 2.6.2 and 2.6.3, which execute credential-stealing malware on import.

Research
A brand-squatted TanStack npm package used postinstall scripts to steal .env files and exfiltrate developer secrets to an attacker-controlled endpoint.