
Research
Malicious npm Packages Impersonate Flashbots SDKs, Targeting Ethereum Wallet Credentials
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
辅助系统开发 ( assist system development )
npm install asd -g
> asd set email liu@liandong.org # author 信息
> asd set username "Liandong Liu" # author 信息
> asd set module-files "Action Model View monitor template.tpl style.less"
# 指定mvc需要的文件(有默认配置)
> asd set title "看排名"
> asd module src/module/app/coreword ## 创建MVC所需所有文件
> asd touch view.js ## 创建单个文件
> asd touch demo/actionConf.js launcher.js
#自动补全demo文件夹,并且在demo/中增加多个文件
> asd
> set email liu@liandong.org
> module src/module/app/coreword
> help # 查看所有可用命令
> asd push module/app/coreword.patch
## 将在云端路径module/app/中增加 coreword.patch文件
> asd pull module/app/coreword.patch ## 下载云端指定路径下的文件
> asd dir # 显示bucket下所有文件
> asd set sckey xxxxx
> asd set ackey yyyyy
模板中的数据通过设置的Context自动获取
如创建路径为 workspace/src/module/app/bidInsight
moduleId 表示以src为基线的path; 除去去后缀部分; module/app/bidInsight
moduleName 表示文件模块名; bidInsight
moduleDomId 用于less; tpl; module_app_bidInsight
monitorTag 表示监控Tag; module_app_bidinsight (全小写)
asd set username "Liandong Liu"
cmd | desc | usage |
---|---|---|
set | 设置环境值 | set key value |
get | 获取环境值 | get key |
delete | 删除环境值 | delete key |
dump | 打印所有值 | dump |
touch | 创建文件 | touch app/util.js lib.js |
module | 建立新模块 | module app/coreword |
mock | 生成mock文件 | mock app/coreword |
push | 上传文件 | push localfile [remotepath] |
pull | 下载文件 | push remotefile [localpath] |
dir | 列表云端列表 | dir / |
cat | 显示文件 | cat filepath |
save | 存储文件 | save filename content |
FAQs
assist system develop
The npm package asd receives a total of 2 weekly downloads. As such, asd popularity was classified as not popular.
We found that asd demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
Security News
Ruby maintainers from Bundler and rbenv teams are building rv to bring Python uv's speed and unified tooling approach to Ruby development.
Security News
Following last week’s supply chain attack, Nx published findings on the GitHub Actions exploit and moved npm publishing to Trusted Publishers.