Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
@treelab/common-logic
Advanced tools
This library has been built using [TSDX](https://tsdx.io/).
This library has been built using TSDX.
It is a repository of business logic that can be shared between various projects such as the client and the api.
# Install the dependencies
yarn
# Run the tests
yarn test
# Build the project in watch mode to `/dist`
yarn start
# Do a one-off build to `/dist`
yarn build
This project uses prettier
and eslint
for styling. Please ensure you have
the appropriate editor extensions installed.
This project keeps a very high bar for testing. If you are committing or updating logic in this project, you should be adding or updating test cases.
Please use the Create new release and publish to npm GitHub action.
FAQs
This library has been built using [TSDX](https://tsdx.io/).
We found that @treelab/common-logic demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 12 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.