
Research
Security News
Lazarus Strikes npm Again with New Wave of Malicious Packages
The Socket Research Team has discovered six new malicious npm packages linked to North Korea’s Lazarus Group, designed to steal credentials and deploy backdoors.
English | 简体中文
![]() IE / Edge | ![]() Firefox | ![]() Chrome | ![]() Safari | ![]() Opera | ![]() Electron |
---|---|---|---|---|---|
IE11, Edge | last 2 versions | last 2 versions | last 2 versions | last 2 versions | last 2 versions |
We recommend using npm or yarn to install,it not only makes development easier,but also allow you to take advantage of the rich ecosystem of Javascript packages and tooling.
$ npm install ant-design-vue --save
$ yarn add ant-design-vue
If you are in a bad network environment,you can try other registries and tools like cnpm.
Project | Description |
---|---|
vue-ref | You can use the callback to get a reference like react |
ant-design-vue-helper | A vscode extension for ant-design-vue |
vue-cli-plugin-ant-design | Vue-cli 3 plugin to add ant-design-vue |
vue-dash-event | The library function, implemented in the DOM template, can use the custom event of the ant-design-vue component (camelCase) |
ant-design-vue is an MIT-licensed open source project. In order to achieve better and sustainable development of the project, we expect to gain more backers. You can support us in any of the following ways:
Become a sponsor and get your logo on our README on Github with a link to your site. [Become a sponsor]
Support us with a monthly donation and help us continue our activities. [Become a backer]
Support us with a monthly donation and help us continue our activities. [Become a backer]
FAQs
An enterprise-class UI design language and Vue-based implementation
The npm package antdv-eoi receives a total of 162 weekly downloads. As such, antdv-eoi popularity was classified as not popular.
We found that antdv-eoi demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
The Socket Research Team has discovered six new malicious npm packages linked to North Korea’s Lazarus Group, designed to steal credentials and deploy backdoors.
Security News
Socket CEO Feross Aboukhadijeh discusses the open web, open source security, and how Socket tackles software supply chain attacks on The Pair Program podcast.
Security News
Opengrep continues building momentum with the alpha release of its Playground tool, demonstrating the project's rapid evolution just two months after its initial launch.