
Security News
/Research
Wallet-Draining npm Package Impersonates Nodemailer to Hijack Crypto Transactions
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
@tora-dev/themekit
Advanced tools
Node wrapper for Theme Kit.
$ npm install @shopify/themekit
const themeKit = require('@shopify/themekit');
await themeKit.command('version');
//=> ThemeKit 0.8.1 darwin/amd64
This wrapper exposes a single function in its API which allows it to run any command available in the original Theme Kit CLI. Here are a collection of examples to run Theme Kit commands.
For a complete list of commands and args: shopify.github.io/themekit/commands.
Remove specific files from development environment.
const themeKit = require('@shopify/themekit');
await themeKit.command('remove', {
env: 'development',
files: ['snippets/pagination.liquid', 'snippets/date.liquid']
});
Deploy all files to staging environment.
const themeKit = require('@shopify/themekit');
themeKit.command('deploy', {
env: 'staging'
});
Deploy theme to production via NPM scripts.
Warning: This example will overwrite the theme based on your config.yml
.
"dependencies": {
"@shopify/themekit": "1.0.0"
},
"scripts": {
"deploy": "shopify-themekit replace --env production"
}
command(command[, flags][, options)
Executes command with arguments using the Theme Kit binary.
command <String>
Theme Kit command to run.
flags <Object>
Flags to pass into the command.
All flags specified in the Theme Kit documentation are available, but in camelCase
rather than in --flagform
.
{
noIgnore: true, // --no-ignore
env: 'development' // --env=development
}
Additional flags:
files
: Specify an array of target files to upload.ignoredFiles
: Like ignoredFile
, but takes in an array of files to ignore.options <Object>
{
cwd: <String>, // Hard-code a working directory to run the binary from
logLevel: <String> // Set level additional output info | 'silent', 'error', 'all', 'silly'
}
For a complete list of commands and flags, see the Theme Kit documentation.
$ shopify-themekit <args>
This CLI component of this package is intended to be used with NPM scripts. It functions exactly the same as the original Theme Kit binary. If you plan on using the command line interface heavily, please refer to the original Theme Kit repository.
This information is for project maintainers:
Instructions
npm version <major|minor|patch>
to update the version in package.json
and package-lock.json
.git push --follow-tags
MIT, see LICENSE.md for details.
FAQs
Node wrapper around Theme Kit
The npm package @tora-dev/themekit receives a total of 1,199 weekly downloads. As such, @tora-dev/themekit popularity was classified as popular.
We found that @tora-dev/themekit demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
/Research
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
Security News
This episode explores the hard problem of reachability analysis, from static analysis limits to handling dynamic languages and massive dependency trees.
Security News
/Research
Malicious Nx npm versions stole secrets and wallet info using AI CLI tools; Socket’s AI scanner detected the supply chain attack and flagged the malware.