
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
@xmark/client
Advanced tools
This project was bootstrapped with [Create Blocklet](https://github.com/blocklet/create-blocklet).
This project was bootstrapped with Create Blocklet.
This blocklet is a static project, which means this is a frontend application. It's contained client code.
Make sure you have @blocklet/cli installed
Blocklet needs blocklet server as a dependency. So you need to install it first.
npm install -g @blocklet/cli
See details in https://docs.arcblock.io/abtnode/en/introduction/abtnode-setup#use-the-binary-distribution
Init blocklet server & start blocklet server
Before starting an blocklet server, you need to init blocklet server.
blocklet server init --mode=debug
blocklet server start
See details in https://docs.arcblock.io/abtnode/en/introduction/abtnode-setup#configure-abt-node
Go to the project directory cd [name]
Install dependencies: npm install or yarn
Start development server: blocklet dev
After developing a blocklet, you may need to bundle it. Use npm run bundle command.
If you want to deploy this blocklet to local blocklet server, you can use blocklet deploy .blocklet/bundle command(Make sure the blocklet is bundled before deployment.)
Or you can simply use
npm run deploycommand.
If you want to deploy this blocklet to remote blocklet server, you can use the command below.
blocklet deploy .blocklet/bundle --endpoint {your blocklet server url} --access-key {blocklet server access key} --access-secret {blocklet server access secret}
Make sure the blocklet is bundled before deployment.
If you want to upload the blocklet to any store for other users to download and use, you can following the following instructions.
Bump version at first.
make bump-version
Then config blocklet store url. You can use those store url in below.
Make sure you have installed a
blocklet storeon your own blocklet server. Check it on here: https://store.blocklet.dev/blocklet/z8ia29UsENBg6tLZUKi2HABj38Cw1LmHZocbQ
blocklet config set store {store url}
Get a accessToken from blocklet store.
Why we need a
accessToken?
AaccessTokenis genrate by blocklet store, which help us upload our blocklet to any store.
Set accessToken to blocklet config
blocklet config set accessToken {accessToken}
Upload a new version to a store.
Make sure the blocklet is bundled before upload.
blocklet upload
Or you can simply use npm run upload command.
You also can upload a new version to blocklet store by Github CI.
Bump version at first.
make bump-version
Push your code to Github main/master branch, or make a pull request to the main/master branch.
The CI workflow will automatically upload a new version to a store.
Q: How to change a blocklet's name?
A: Change the name field in the package.json file, change the name field in the blocklet.yml file.
You can also change the title field and description field in the blocklet.yml file.
Run blocklet meta command, you will get a did config, copy the did value.
Replace this command "bundle": "PUBLIC_URL='/.blocklet/proxy/{did}' npm run build", in package.json
Replace did field in the blocklet.yml
Q: How to change a blocklet's logo?
Change the logo.png file root folder.
Or you can change the logo field in the blocklet.yml file.
Make sure you have added the logo path to the
blocklet.ymlfilefilesfield.
blocklet.yml: https://github.com/blocklet/blocklet-specification/blob/main/docs/meta.mdThe code is licensed under the Apache 2.0 license found in the LICENSE file.
FAQs
This project was bootstrapped with [Create Blocklet](https://github.com/blocklet/create-blocklet).
We found that @xmark/client demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.