
Security News
/Research
Wallet-Draining npm Package Impersonates Nodemailer to Hijack Crypto Transactions
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
Create ISV Plugin with no build configuration.
npm i -g aop-cli
aop cert
aop init myApp
cd myApp
aop dev
You’ll need to have Node >= 7.10.1
on your local development machine. You can use nvm (macOS/Linux) or nvm-windows to easily switch Node versions between different projects.
To create a new plugin, run command:
aop cert
aop init myApp
cd myApp
aop dev
It will create a directory called myApp inside the current folder. Inside that directory, it will generate the initial project structure and install the transitive dependencies:
.myApp
├── README.md
├── build
│ └── vendor.dll.js
├── build.sh
├── common
│ └── index.scss
├── custom.config.js
├── example
│ └── index.html
├── index.js
├── layout
│ ├── components
│ │ ├── Main
│ │ │ ├── index.jsx
│ │ │ └── index.scss
│ │ └── theme
│ │ ├── navigation-dark.scss
│ │ └── navigation-light.scss
│ ├── index.jsx
│ └── index.scss
├── package.json
├── page
│ ├── page1
│ │ ├── components
│ │ │ └── card
│ │ │ ├── index.jsx
│ │ │ └── index.scss
│ │ └── index.js
│ └── page2
│ ├── components
│ │ └── form
│ │ ├── index.jsx
│ │ └── index.scss
│ └── index.js
└── routes.jsx
Inside the newly created project, you can run some built-in commands:
aop cert
Install the HTTPS certificate to solve the certificate trust problem. You may need to enter the user password during the installation process.
aop dev
Before run this command, please make sure you have binding host:
127.0.0.1 localhost
127.0.0.1 g.alicdn.com
aop dev
will run the app in development mode.
aop
will open https://page.1688.com/html/isv-bridge.html?appKey=appKey&version=1.0.0 to view it in the browser automatically.
The page will automatically reload if you make changes to the code.
You will see the build errors and lint warnings in the console.
aop build
Builds the app for production to the build folder. It correctly bundles React in production mode and optimizes the build for the best performance.
package.json
does not support the Chinese name
field. It can only be a combination of subtitles, numbers, underscores, and connectors.If you have any problem, welcome to join the dingtalk group:
If you have any suggestions and requirements, please contact the developer 刘甲
and 赵泰
.
FAQs
isv 开发者工具
The npm package aop-cli receives a total of 1 weekly downloads. As such, aop-cli popularity was classified as not popular.
We found that aop-cli demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 4 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
/Research
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
Security News
This episode explores the hard problem of reachability analysis, from static analysis limits to handling dynamic languages and massive dependency trees.
Security News
/Research
Malicious Nx npm versions stole secrets and wallet info using AI CLI tools; Socket’s AI scanner detected the supply chain attack and flagged the malware.