Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Create ISV Plugin with no build configuration.
npm i -g aop-cli
aop cert
aop init myApp
cd myApp
aop dev
You’ll need to have Node >= 7.10.1
on your local development machine. You can use nvm (macOS/Linux) or nvm-windows to easily switch Node versions between different projects.
To create a new plugin, run command:
aop cert
aop init myApp
cd myApp
aop dev
It will create a directory called myApp inside the current folder. Inside that directory, it will generate the initial project structure and install the transitive dependencies:
.myApp
├── README.md
├── build
│ └── vendor.dll.js
├── build.sh
├── common
│ └── index.scss
├── custom.config.js
├── example
│ └── index.html
├── index.js
├── layout
│ ├── components
│ │ ├── Main
│ │ │ ├── index.jsx
│ │ │ └── index.scss
│ │ └── theme
│ │ ├── navigation-dark.scss
│ │ └── navigation-light.scss
│ ├── index.jsx
│ └── index.scss
├── package.json
├── page
│ ├── page1
│ │ ├── components
│ │ │ └── card
│ │ │ ├── index.jsx
│ │ │ └── index.scss
│ │ └── index.js
│ └── page2
│ ├── components
│ │ └── form
│ │ ├── index.jsx
│ │ └── index.scss
│ └── index.js
└── routes.jsx
Inside the newly created project, you can run some built-in commands:
aop cert
Install the HTTPS certificate to solve the certificate trust problem. You may need to enter the user password during the installation process.
aop dev
Before run this command, please make sure you have binding host:
127.0.0.1 localhost
127.0.0.1 g.alicdn.com
aop dev
will run the app in development mode.
aop
will open https://page.1688.com/html/isv-bridge.html?appKey=appKey&version=1.0.0 to view it in the browser automatically.
The page will automatically reload if you make changes to the code.
You will see the build errors and lint warnings in the console.
aop build
Builds the app for production to the build folder. It correctly bundles React in production mode and optimizes the build for the best performance.
package.json
does not support the Chinese name
field. It can only be a combination of subtitles, numbers, underscores, and connectors.If you have any problem, welcome to join the dingtalk group:
If you have any suggestions and requirements, please contact the developer 刘甲
and 赵泰
.
FAQs
isv 开发者工具
The npm package aop-cli receives a total of 3 weekly downloads. As such, aop-cli popularity was classified as not popular.
We found that aop-cli demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 4 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.