
Security News
Another Round of TEA Protocol Spam Floods npm, But It’s Not a Worm
Recent coverage mislabels the latest TEA protocol spam as a worm. Here’s what’s actually happening.
@sakuli/rollup-hooks
Advanced tools
TLDR;
This is a essential Part of Sakuli which handles the preprocessing of Testfiles. It is usually not nesseccary for Sakuli-Endusers to have any knowledge about the internals of this package.
This package provdies a preset that implements the following lifecycle hooks:
It is required by @sakuli/legacy but can also be used (and considered) as the default file transformer for any Sakuli extension.
The basic task is to take a given test-file and bundle it together with it's dependencies into a single script-string. Sakuli will than create a Script-Object from this source.
As the name of this package tells, Rollup does the heavy lifting of the bundling process. There is not much magic in this process. Some points are still interesting:
commonjs, in order to work properly with external required modules sakuli also injects the require function from its scope..ts or .tsx the plugin rollup-plugin-typescript2 is added as a plugin3.0.0
FAQs
provide test script preprocessing with rollup
The npm package @sakuli/rollup-hooks receives a total of 4 weekly downloads. As such, @sakuli/rollup-hooks popularity was classified as not popular.
We found that @sakuli/rollup-hooks demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Recent coverage mislabels the latest TEA protocol spam as a worm. Here’s what’s actually happening.

Security News
PyPI adds Trusted Publishing support for GitLab Self-Managed as adoption reaches 25% of uploads

Research
/Security News
A malicious Chrome extension posing as an Ethereum wallet steals seed phrases by encoding them into Sui transactions, enabling full wallet takeover.