
Security News
/Research
Wallet-Draining npm Package Impersonates Nodemailer to Hijack Crypto Transactions
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
Command line tool to manage your Azure Developer CLI (AZD) projects' infrastructure.
[!NOTE] Only Bicep templates are supported for now.
You need Node.js v20+ and git installed on your machine to use this tool. You can either install the CLI globally:
npm install -g azd-infra
Or use it directly with npx
without installing it:
npx azd-infra@latest <command>
[!TIP] The quickest way to get started is to run the following command in your project's root folder:
npx azd-infra@latest refresh
This will interactively update your project's infrastructure with the latest AZD core templates and fix any missing or unused templates.
azd-infra add
: Adds one or more AZD core templates to your infrastructure.azd-infra update
: Checks your infrastructure and updates it using latest AZD core templates.azd-infra fix
: Checks your infrastructure dependency graph for missing or unused resources and fixes them.azd-infra refresh
: Runs update
and fix
in sequence.Commands are interactive and will ask you for confirmation before applying changes, unless you use the --yes
flag.
azd-infra add
This command will perform the following tasks:
azd-infra update
This command will perform the following tasks:
core
templates with their latest version.current
: if the template is up to dateupdate
: if a newer version availablemissing
: if no matching file existing in latest core templates. This usually happens when a template has been renamed or removed.azd-infra fix
This command will perform the following tasks:
azd-infra refresh
This command will run update
and fix
in sequence. This is the recommended command to keep your infrastructure up to date, as sometimes updating a template can introduce new dependencies that will be detected and fixed by the fix
command.
FAQs
Manages your Azure Developer CLI projects' infrastructure
The npm package azd-infra receives a total of 2 weekly downloads. As such, azd-infra popularity was classified as not popular.
We found that azd-infra demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
/Research
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
Security News
This episode explores the hard problem of reachability analysis, from static analysis limits to handling dynamic languages and massive dependency trees.
Security News
/Research
Malicious Nx npm versions stole secrets and wallet info using AI CLI tools; Socket’s AI scanner detected the supply chain attack and flagged the malware.