
Research
Malicious npm Packages Impersonate Flashbots SDKs, Targeting Ethereum Wallet Credentials
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
@nutui/carefree
Advanced tools
本webpack插件功能:
npm install @nutui/carefree --save-dev
webpack
配置文件中引入const Carefree = require('@nutui/carefree');
plugins: [
new Carefree({
//配置项
})
]
package.json
的scripts
字段中添加carefree-dev
和carefree-build
命令// package.json
scripts: {
...
"carefree-dev": "cross-env NODE_ENV=carefree carefree_env=dev webpack -w --colors --progress",
"carefree-build": "cross-env carefree_env=build npm run upload",
...
}
carefree
,可在脚本里修改carefree_env
为cross-env carefree_env=stop
ssh
与ftp
两种上传方式upload
设置为false
将只打印二维码,不上传静态资源devtool
以减小上传文件的体积,需要时可以设置为webpack
的devtool
相应值参数 | 说明 | 默认值 | 是否必填 |
---|---|---|---|
upload | 是否上传 | true | 否 |
devtool | 参考webpack的devtool配置 | false | 否 |
publicPath | 同webpackConfig.output.publicPath | - | 是 |
qrcodeUrl | 扫二维码后跳转的地址 | publicPath + 'index.html' | 否 |
ftp.host | 服务器ip | -- | 是 |
ftp.port | 服务器 | -- | 是 |
ftp.source | 待上传的目录 | -- | 是 |
ftp.target | 服务器端的项目目录 | -- | 是 |
ftp.username | 服务器用户名 | -- | 是 |
ftp.password | 服务器密码 | -- | 是 |
ssh[option] | 同ftp相关配置项 | -- | 是 |
FAQs
A H5 debugging tool independent of wifi hotspots
The npm package @nutui/carefree receives a total of 0 weekly downloads. As such, @nutui/carefree popularity was classified as not popular.
We found that @nutui/carefree demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
Security News
Ruby maintainers from Bundler and rbenv teams are building rv to bring Python uv's speed and unified tooling approach to Ruby development.
Security News
Following last week’s supply chain attack, Nx published findings on the GitHub Actions exploit and moved npm publishing to Trusted Publishers.