
Security News
/Research
Wallet-Draining npm Package Impersonates Nodemailer to Hijack Crypto Transactions
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
@redhat-developer/kiota-wasm
Advanced tools
This project brings the power of Kiota straight into your browser!
Kiota is a C# project and the dotnet
toolchain allows you to compile it with target browser-wasm
and eventually run it in the browser.
There are a few minor challenges with the integration of the produced artifacts into a real-world, modern, frontend application. We do maintain working examples up to date to make sure that it's feasible to leverage this functionality.
npm install -D @redhat-developer/kiota-wasm
.gitignore
):npm install -D copyfiles rimraf
"scripts": {
...
"postinstall": "rimraf ./public/kiota-wasm && copyfiles -u 4 'node_modules/@redhat-developer/kiota-wasm/dist/**/*.*' 'public/kiota-wasm'"
}
...
vite
you need to exclude those dependencies from the bundler:export default defineConfig({
plugins: [
react(),
],
build: {
rollupOptions: {
external: [
/^.*kiota-wasm.*/,
]
}
}
})
vite
:// @ts-ignore
const { generate } = await import('/kiota-wasm/main.js?url');
or with webpack
:
const { generate } = await import(
/* webpackIgnore: true */ './kiota-wasm/main.js'
);
generate(spec: string, language: string, clientClassName: string, namespaceName: string, includePatterns: string, excludePatterns: string);
To build this project you need dotnet
version 7+ and the wasm-tools
:
dotnet workload install wasm-tools
and run the build:
dotnet build --configuration Release
This repository is released on tag:
git fetch origin
git checkout origin/main
git tag <version>
git push origin <version>
and the CI will do the job.
FAQs
Kiota compiled in a native WASM module.
We found that @redhat-developer/kiota-wasm demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 11 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
/Research
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
Security News
This episode explores the hard problem of reachability analysis, from static analysis limits to handling dynamic languages and massive dependency trees.
Security News
/Research
Malicious Nx npm versions stole secrets and wallet info using AI CLI tools; Socket’s AI scanner detected the supply chain attack and flagged the malware.