Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Command line tool to manage your Azure Developer CLI (AZD) projects' infrastructure.
[!NOTE] Only Bicep templates are supported for now.
You need Node.js v20+ and git installed on your machine to use this tool. You can either install the CLI globally:
npm install -g azd-infra
Or use it directly with npx
without installing it:
npx azd-infra@latest <command>
![!TIP] The quickest way to get started is to run the following command in your project's root folder:
npx azd-infra@latest refresh
This will interactively update your project's infrastructure with the latest AZD core templates and fix any missing or unused templates.
azd-infra add
: Adds one or more AZD core templates to your infrastructure.azd-infra update
: Checks your infrastructure and updates it using latest AZD core templates.azd-infra fix
: Checks your infrastructure dependency graph for missing or unused resources and fixes them.azd-infra refresh
: Runs update
and fix
in sequence.Commands are interactive and will ask you for confirmation before applying changes, unless you use the --yes
flag.
azd-infra add
This command will perform the following tasks:
azd-infra update
This command will perform the following tasks:
core
templates with their latest version.current
: if the template is up to dateupdate
: if a newer version availablemissing
: if no matching file existing in latest core templates. This usually happens when a template has been renamed or removed.azd-infra fix
This command will perform the following tasks:
azd-infra refresh
This command will run update
and fix
in sequence. This is the recommended command to keep your infrastructure up to date, as sometimes updating a template can introduce new dependencies that will be detected and fixed by the fix
command.
FAQs
Manages your Azure Developer CLI projects' infrastructure
The npm package azd-infra receives a total of 14 weekly downloads. As such, azd-infra popularity was classified as not popular.
We found that azd-infra demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.