
Research
/Security News
9 Malicious NuGet Packages Deliver Time-Delayed Destructive Payloads
Socket researchers discovered nine malicious NuGet packages that use time-delayed payloads to crash applications and corrupt industrial control systems.
This package will generate stable links and markdown syntax for npm modules. In particular it outputs syntax for npm, travis, david, coveralls & stability badge svgs so you can easily paste them to your readme.
Install (with -g or npm link the install), and use in a package root:
$ badgify
Example output (from badgify folder):
[](https://www.npmjs.org/package/badgify)
[](http://travis-ci.org/clux/badgify)
[](https://david-dm.org/clux/badgify)
[](https://coveralls.io/r/clux/badgify)
Then copy paste that to the start of your README.md. For speed you could pipe it through xclip, or just use it to generate a basic README:
echo "# $(basename $PWD)" > README.md
badgify >> README.md
name key if the package is not private.travis.yml file it will generate a travis build badgepackage.json has a coveralls or a coverage script it will generate the svg badge that links to your coveralls.io reportstability key in package.jsonMIT-Licensed. See LICENSE file for details.
FAQs
Rebuild readme markdown badges from package.json scripts
The npm package badgify receives a total of 3 weekly downloads. As such, badgify popularity was classified as not popular.
We found that badgify demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
Socket researchers discovered nine malicious NuGet packages that use time-delayed payloads to crash applications and corrupt industrial control systems.

Security News
Socket CTO Ahmad Nassri discusses why supply chain attacks now target developer machines and what AI means for the future of enterprise security.

Security News
Learn the essential steps every developer should take to stay secure on npm and reduce exposure to supply chain attacks.