
Research
npm Malware Targets Telegram Bot Developers with Persistent SSH Backdoors
Malicious npm packages posing as Telegram bot libraries install SSH backdoors and exfiltrate data from Linux developer machines.
@travetto/compiler
Advanced tools
Node-integration of Typescript Compiler with advanced functionality for detecting changes in classes and methods.
Install: @travetto/compiler
npm install @travetto/compiler
This module expands upon Typescript, with supplemental functionality:
tsconfig.json
from the project directory to providees2015
Proxy
s to allow for swapping out implementation at runtimeAdditionally, there is support for common AST transformations via Transformation
When dealing with transformers, logging is somewhat tricky as the compiler executes before the code is loaded. To that end, the file compiler.log
is created in the cache directory during the compilation process. This is a location that transformers should be free to log to, for debugging, and any additional feedback.
Terminal: Compiler usage
$ travetto travetto compile --help
Usage: compile [options]
Options:
-c, --clean Indicates if the cache dir should be cleaned
-o, --output <output> Output directory
-q, --quiet Quiet operation
-h, --help display help for command
This command line operation pre-compiles all of the application source code. You can target the output location as well, which is useful in conjunction with process.env.TRV_CACHE
for relocating the compiled files.
FAQs
The compiler infrastructure for the Travetto framework
The npm package @travetto/compiler receives a total of 215 weekly downloads. As such, @travetto/compiler popularity was classified as not popular.
We found that @travetto/compiler demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Malicious npm packages posing as Telegram bot libraries install SSH backdoors and exfiltrate data from Linux developer machines.
Security News
pip, PDM, pip-audit, and the packaging library are already adding support for Python’s new lock file format.
Product
Socket's Go support is now generally available, bringing automatic scanning and deep code analysis to all users with Go projects.