
Research
/Security News
9 Malicious NuGet Packages Deliver Time-Delayed Destructive Payloads
Socket researchers discovered nine malicious NuGet packages that use time-delayed payloads to crash applications and corrupt industrial control systems.
@sakuli/rollup-hooks
Advanced tools
TLDR;
This is a essential Part of Sakuli which handles the preprocessing of Testfiles. It is usually not nesseccary for Sakuli-Endusers to have any knowledge about the internals of this package.
This package provdies a preset that implements the following lifecycle hooks:
It is required by @sakuli/legacy but can also be used (and considered) as the default file transformer for any Sakuli extension.
The basic task is to take a given test-file and bundle it together with it's dependencies into a single script-string. Sakuli will than create a Script-Object from this source.
As the name of this package tells, Rollup does the heavy lifting of the bundling process. There is not much magic in this process. Some points are still interesting:
commonjs, in order to work properly with external required modules sakuli also injects the require function from its scope..ts or .tsx the plugin rollup-plugin-typescript2 is added as a plugin3.0.0
FAQs
provide test script preprocessing with rollup
The npm package @sakuli/rollup-hooks receives a total of 3 weekly downloads. As such, @sakuli/rollup-hooks popularity was classified as not popular.
We found that @sakuli/rollup-hooks demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
Socket researchers discovered nine malicious NuGet packages that use time-delayed payloads to crash applications and corrupt industrial control systems.

Security News
Socket CTO Ahmad Nassri discusses why supply chain attacks now target developer machines and what AI means for the future of enterprise security.

Security News
Learn the essential steps every developer should take to stay secure on npm and reduce exposure to supply chain attacks.