
Security News
/Research
Wallet-Draining npm Package Impersonates Nodemailer to Hijack Crypto Transactions
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
@search-api-decoupled/client
Advanced tools
This app is meant to be UI agnostic search client for Search API decoupled module.
It's built with React and Typescript. And it expects to get layouts, regions, config, custom elements and results from the backend.
The app expects 3 interfaces:
window.drupalSettings.search_api_endpoint
: for the ui and app configThe rendering of elements is done using the tags provided by the backend or divs, on production, this app is totally independent and only expects the config, the backend responses and the layout markup.
The app will be used in the search api decoupled ui
drupal module in order to consume the search api decoupled backend module, anyhow, it could also be used in decoupled websites as a static asset, config should still be provided via window variable.
More documentation can be found in the wiki for the project: https://git.drupalcode.org/project/search_api_decoupled_client/-/wikis/home
You only need to follow these steps to get the app running in your local machine.
git clone git@git.drupal.org:project/search_api_decoupled_client.git
@search-api-decoupled/ui
is used@search-api-decoupled/wc-ui
as a default custom element librarypackage.json
and ensure you add the required js and css files in public/index.html
so they are available during developmentelements.ts
or use the decoupled
layout on the development server settingsnvm use && npm i
npm run dev
to mock the config (RECOMMENDED) (you can adapt it in elements.ts
and layouts.ts
)npm run start
to run the app without mocked config, you will need to set the window variable drupalSettings.search_api_endpoint
with the config you want to useFAQs
UI client for the drupal search-api-decoupled ecosystem
We found that @search-api-decoupled/client demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
/Research
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
Security News
This episode explores the hard problem of reachability analysis, from static analysis limits to handling dynamic languages and massive dependency trees.
Security News
/Research
Malicious Nx npm versions stole secrets and wallet info using AI CLI tools; Socket’s AI scanner detected the supply chain attack and flagged the malware.