
Research
/Security News
9 Malicious NuGet Packages Deliver Time-Delayed Destructive Payloads
Socket researchers discovered nine malicious NuGet packages that use time-delayed payloads to crash applications and corrupt industrial control systems.
@xiee/utils
Advanced tools
This repo contains miscellaneous tools and utilities written in JavaScript. They
are published as an NPM package
@xiee/utils. You can load them
via jsdelivr.com, e.g.,
<script src="https://cdn.jsdelivr.net/npm/@xiee/utils/js/faq.min.js" defer></script>
<link href="https://cdn.jsdelivr.net/npm/@xiee/utils/css/faq.min.css" rel="stylesheet"></link>
See the full documentation at https://yihui.org/en/2018/11/md-js-tricks/.
Add the title attribute to <img> if the attribute does not exist. The value
of the attribute is taken from the alt attribute. It modifies
<img src="foo.png" alt="an image" />
to
<img src="foo.png" alt="an image" title="an image" />
Then the image will have a tooltip on mouseover.
Center <img>, <video>, and <object> on a page if they are the only child
of their parent element.
If a link of <a> does not start with http:// or https://, add the
attribute target="_blank" to <a> so it opens in a new tab/window.
Turn an ordered list on an HTML page into a collapsible FAQ list. Click on any
question to toggle the visibility of its answer. Or click on the button at the
top-right to expand or collapse all answers. Each FAQ item has an anchor (shown
as the # symbol at the end on mouseover) that provides the link to the
specific question.
Note that you will need to load faq.css accordingly. See a more detailed
introduction here.
Add [ ] to footnote numbers and move the return symbols in footnotes.
Fix the table of contents generated by lower versions of Hugo.
Convert HTML comments of the form <!--# comments --> to
<span class="hash-note">comments</span>. If such comments are found, the
document body will gain classes has-notes and hide-notes. You can use CSS to
style the notes or hide/show them as you wish.
Add anchor links to all section headings (e.g., <h2>) that have nonempty id
attributes.
Find keyboard keys in <code></code> and convert the tag to <kbd></kbd>,
e.g., convert <code>Ctrl + C</code> to <kbd>Ctrl</kbd> + <kbd>C</kbd>.
With key-buttons.css, the keys will be styled as boxes with shadows like
buttons. You can learn more details in this
post.
Disable highlight.js's auto language detection, and then apply highlighting. This requires highlight.js to be loaded in advance.
Write LaTeX math expressions ($\alpha$) in <code></code in HTML or a pair of
backticks in Markdown (which will be rendered to <code> in HTML), and this
script will remove the <code> tag, so that MathJax can recognize the math
expressions (by default, MathJax ignores math in <code>).
Add the nohighlight class to <code> in <pre> when it does not have a
class, so that highlight.js will not try to syntax highlight the code in it.
Simply run renderMathInElement(document.body) to render math expression using
KaTeX's auto-render extension.
Right-align a <blockquote> footer if the footer is a <p> that starts with
the em-dash.
FAQs
Miscellaneous tools and utilities to manipulate HTML pages
We found that @xiee/utils demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
Socket researchers discovered nine malicious NuGet packages that use time-delayed payloads to crash applications and corrupt industrial control systems.

Security News
Socket CTO Ahmad Nassri discusses why supply chain attacks now target developer machines and what AI means for the future of enterprise security.

Security News
Learn the essential steps every developer should take to stay secure on npm and reduce exposure to supply chain attacks.