
Research
Malicious npm Packages Impersonate Flashbots SDKs, Targeting Ethereum Wallet Credentials
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
babel-transform-roll20
Advanced tools
A babel transform tool for transpiling scripts for the Roll20 sandbox.
This plugin allows Babel to transform import and export statements to support the Roll20 API sandbox.
Roll20 is a virtual tabletop application that allows pen-and-paper games online. As part of this experience, Roll20 Pro Users are able to write their own scripts for interacting with the application, ranging from simple macros to complex chat bots and campaign tool managers. These scripts run within the Roll20 API Sandbox, a restricted Node.js virtual machine, and have limitations imposed on them for security or simplicity reasons.
One of these limitations is the removal of Node.js's built-in module system. Scripts are self-contained and restricted to a single file. While this limitation is not a problem for smaller scripts, it makes writing and maintaining larger scripts that would traditionally occupy multiple modules painful.
Into this gap steps babel-transform-roll20
for transforming import
/ export
syntax module loads into a single file for use within Roll20 in a manner similar to webpack, but compliant with the technical limitations of the Roll20 API Sandbox.
// ./imported-file.js
export const exportedObject = {
a: 1,
b: 2
}
// ./index-file.js
import { exportedObject } from './imported-file'
console.log(exportedObject.a); // 2
const modules = {}
modules['./imported-file'] = (function () {
const exportedObject = {
a: 1,
b: 2
};
return {
exportedObject: exportedObject
};
})();
const exportedObject = modules['./imported-file'].exportedObject;
console.log(exportedObject.a);
FAQs
A babel transform tool for transpiling scripts for the Roll20 sandbox.
The npm package babel-transform-roll20 receives a total of 11 weekly downloads. As such, babel-transform-roll20 popularity was classified as not popular.
We found that babel-transform-roll20 demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
Security News
Ruby maintainers from Bundler and rbenv teams are building rv to bring Python uv's speed and unified tooling approach to Ruby development.
Security News
Following last week’s supply chain attack, Nx published findings on the GitHub Actions exploit and moved npm publishing to Trusted Publishers.