
Research
Malicious npm Packages Impersonate Flashbots SDKs, Targeting Ethereum Wallet Credentials
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
@nkallen/electron-forge-core
Advanced tools
A complete tool for building modern Electron applications
This module contains the core logic of Electron Forge and exposes the base API as a number of simple JS functions.
import { api } from '@electron-forge/core';
// Package the current directory as an Electron app
api.package(__dirname);
The named export api
has it's methods documented over at ForgeAPI.
All the methods are async and expose the core forge methods, please note that all
user-side configuration is still done through your forge config file or the "config.forge"
section of your package.json. This API simply let's you call the methods in
node land without using the CLI.
As all methods return a promise you should handle all rejections, you should note
that rejections will not always be errors, in fact we commonly reject our
promises with just strings so do not assume that properties such as stack
or
message
will exist on thrown errors.
FAQs
A complete tool for building modern Electron applications
We found that @nkallen/electron-forge-core demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
Security News
Ruby maintainers from Bundler and rbenv teams are building rv to bring Python uv's speed and unified tooling approach to Ruby development.
Security News
Following last week’s supply chain attack, Nx published findings on the GitHub Actions exploit and moved npm publishing to Trusted Publishers.