
Research
NPM targeted by malware campaign mimicking familiar library names
Socket uncovered npm malware campaign mimicking popular Node.js libraries and packages from other ecosystems; packages steal data and execute remote code.
@tilde-nlp/ngx-menu
Advanced tools
Library for project menu. Contains collapsible side navigation and dropdown menu for small screens Component layout and stlying is based on `angular flex-layout` framework.
Library for project menu. Contains collapsible side navigation and dropdown menu for small screens
Component layout and stlying is based on angular flex-layout
framework.
Basic steps for including side nav in app:
Install necessary dependencies npm i @tilde-nlp/ngx-common @tilde-nlp/ngx-menu @tilde-nlp/ngx-strapi @tilde-nlp/strapi-models
. Strapi libs are necessary for legacy use and in case project needs strapi menu items.
Provide MENU_SHARED_CONFIG
amd STRAPI_API_CONFIG_TOKEN
(even if you don't need one) in your app.config.ts file.
Example:
{
provide: MENU_SHARED_CONFIG, useValue: {
disableStrapi: true,
baseUrl: '/',
itemGroups: [
{
items: [
]
}
]
}
},
{
provide: STRAPI_API_CONFIG_TOKEN,
useValue: { baseUrl: "", enabled: false }
},
readonly settings: SideNavSettings = {
menuLogo: 'images/logo.svg',
menuLogoCollapsed: 'images/logo.svg',
disableStrapi: true,
expandedWidth: '241px',
collapsedWidth: '56px',
userOptions: [
{
label: 'menu.logout',
callback: () => this.logout()
}
]
};
<lib-side-nav-menu
[menuSettings]="settings"
>
</lib-side-nav-menu>
FAQs
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Socket uncovered npm malware campaign mimicking popular Node.js libraries and packages from other ecosystems; packages steal data and execute remote code.
Research
Socket's research uncovers three dangerous Go modules that contain obfuscated disk-wiping malware, threatening complete data loss.
Research
Socket uncovers malicious packages on PyPI using Gmail's SMTP protocol for command and control (C2) to exfiltrate data and execute commands.