Research
Security News
Quasar RAT Disguised as an npm Package for Detecting Vulnerabilities in Ethereum Smart Contracts
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
[![Build Status](https://travis-ci.org/eirslett/bankie.svg?branch=master)](https://travis-ci.org/eirslett/bankie)
This tool calculates IBAN bank account numbers.
Only Norway is supported yet. (Support for other countries should be added!)
npm install bankie
This is the general flow:
Look at the unit tests (for example test/norwegian-test.js
),
they show you how the package should be used.
Feel free to add support for more countries! Follow the directions of the project; add unit tests, and the code should be formatted according to the standard style guide.
If you want to add other features than additional country support, I suggest that you open a GitHub issue first, to discuss it.
Here are some common commands:
# Build
npm run build
# Run tests
npm run mocha
# Run lint
npm run lint
Check out the master
branch, run
# could be npm version "minor" or "major" instead of "patch"
npm version patch -m "Release new version"
git push --follow-tags
Travis CI will build and release the package.
Some resources/datasets are stored in the resources/ directory. These can be processed by build scripts inside the build/ directory, for example to convert xls/csv files to JSON.
FAQs
[![Build Status](https://travis-ci.org/eirslett/bankie.svg?branch=master)](https://travis-ci.org/eirslett/bankie)
We found that bankie demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
Security News
Research
A supply chain attack on Rspack's npm packages injected cryptomining malware, potentially impacting thousands of developers.
Research
Security News
Socket researchers discovered a malware campaign on npm delivering the Skuld infostealer via typosquatted packages, exposing sensitive data.