
Research
Malicious npm Packages Impersonate Flashbots SDKs, Targeting Ethereum Wallet Credentials
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
@pantheon-systems/drupal-kit
Advanced tools
Utilities to help simplify the process of sourcing data from a Drupal backend for a Front-End Site hosted on Pantheon.
To install this package to use in your application:
npm install @pantheon-systems/drupal-kit
Modules can be imported from the @pantheon-systems/drupal-kit
package. For
example, to use Drupal State to source data from your CMS backend:
import { DrupalState } from ' @pantheon-systems/drupal-kit';
const store = new DrupalState({
apiBase: 'https://dev-ds-demo.pantheonsite.io',
});
const recipesFromApi = await store.getObject({ objectName: 'node--recipe' });
const recipeFromStore = await store.getObject({
objectName: 'node--recipe',
id: '33386d32-a87c-44b9-b66b-3dd0bfc38dca',
});
For more information, consult the full Drupal State documentation
To see the API reference for @pantheon-systems/drupal-kit
,
visit our docs site
Please see the Contributing guide in our monorepo to contribute to the project.
FAQs
Pantheon Decoupled Kit's Drupal Kit
We found that @pantheon-systems/drupal-kit demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 6 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
Security News
Ruby maintainers from Bundler and rbenv teams are building rv to bring Python uv's speed and unified tooling approach to Ruby development.
Security News
Following last week’s supply chain attack, Nx published findings on the GitHub Actions exploit and moved npm publishing to Trusted Publishers.