
Security News
/Research
Wallet-Draining npm Package Impersonates Nodemailer to Hijack Crypto Transactions
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
@rexlabs/stitch
Advanced tools
Stitch is a tool used to pull together definitions written in JSON with the main focus on simplicity.
code
folder) and insert them
into your resulting definition.form
folder definition.json
files into your result definition.At its heart, it's a tool used to help write and maintain complex JSON files that would otherwise be incomprehensible.
npm: npm i rexlabs/stitch
yarn: yarn global add rexlabs/stitch
For environment requirements, see the package.json
.
The folder that contains your definition.json
is the entry point for stitch
to work out of.
You can also have a code
and form
folder located in your entry point directory, this enables stitch
to take
advantage of advanced base64 encoding (JavaScript) and JSON file combining (forms).
definition-folder
|-- definition.json
|-- code
| |-- my_step.js
|-- form
|-- my_step.json
To take advantage of the base64 encoding component of stitch
, you'll need to name your JavaScript files located inside
your code
folder the same as the step that they reside in, for example:
definition.json
{
"name": "loop",
"triggers": "check_loop",
"description": "Loop until I say to stop",
"label": "Loop step - do something",
"type": "task",
"function": {
"format": "base64",
"code": "",
"modules": ["lodash"]
}
}
loop.js
const _ = require("lodash");
/**
* @param {Object} context
* @returns {Object}
*/
module.exports = function(context) {
return {
should_loop: _.get(context, "state.meta.steps.loop.loop_index", 0) < 3
};
};
Usage: stitch [options] [command]
Options:
-h, --help output usage information
Commands:
import <definition> <path> Import an already exported definition to be expanded
export [options] <dir> Export a definition to be weaved together
Expands an existing definition and writes to the destination
stitch import "$(< file.json)" <destination>
Export a definition from the supplied dir
stitch export <dir>
stitch export path/to/directory > result.json
stitch export path/to/directory | pbcopy
stitch import "$(< file.json)" <destination>
FAQs
Stitch together JSON definitions
The npm package @rexlabs/stitch receives a total of 0 weekly downloads. As such, @rexlabs/stitch popularity was classified as not popular.
We found that @rexlabs/stitch demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 27 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
/Research
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
Security News
This episode explores the hard problem of reachability analysis, from static analysis limits to handling dynamic languages and massive dependency trees.
Security News
/Research
Malicious Nx npm versions stole secrets and wallet info using AI CLI tools; Socket’s AI scanner detected the supply chain attack and flagged the malware.