
Security News
/Research
Wallet-Draining npm Package Impersonates Nodemailer to Hijack Crypto Transactions
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
A React framework for building instant web apps.
pages/index.tsx
and package.json
are needed to get Blade to run)/api
for you, for models that you want to expose)Blade works most efficiently when using RONIN — a globally replicable database powered by SQLite. Blade is and will always be usable with any other data source as well, however you will see performance drawbacks if that datasource isn't equally fast.
The first and currently largest known implementation of Blade is the RONIN dashboard (its code is currently closed, but will be opened up very soon), which has been implemented with Blade since its inception.
Blade purposefully does not (and likely won't ever) comply with the official specification for React Server Components, because it provides different solutions to the problems that RSC aims to solve.
The experimental React version defined in the templates is currently required. Support for the "stable" release channel of React will follow very soon.
To get started with Blade, create a new app with this command:
npm create blade
Afterward, enter the newly created directory and install the dependencies:
cd blade-example
npm install
Lastly, start the development server:
npm run dev
In order to deploy your Blade app to production, use your deployment provider of choice. For example, you can sign up to Vercel and run this command in the directory of your Blade app to deploy it:
vercel -y
That's all. The command will create the Vercel project and deploy the app for you.
Check out the documentation for more details.
To start contributing code, clone the repo and install its dependencies:
bun install
Once that's done, link the package to make it available to all of your local projects:
bun link
Inside your project, you can then run the following command, which is similar to bun add blade
or npm install blade
, except that it doesn't install blade
from npm, but instead uses your local clone of the package:
bun link blade
If your project is not yet compatible with Bun, feel free to replace all of the occurrences of the word bun
in the commands above with npm
instead.
You will just need to make sure that, once you create a pull request on the current repo, it will not contain a package-lock.json
file, which is usually generated by npm. Instead, we're using the bun.lockb
file for this purpose (locking sub dependencies to a certain version).
Before you create a pull request on the blade
repo, it is advised to run its tests in order to ensure everything works as expected:
# Run all tests
bun run test
# Alternatively, run a single test
bun run test -- -t 'your test name'
FAQs
React at the edge.
The npm package blade receives a total of 19,087 weekly downloads. As such, blade popularity was classified as popular.
We found that blade demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 4 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
/Research
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
Security News
This episode explores the hard problem of reachability analysis, from static analysis limits to handling dynamic languages and massive dependency trees.
Security News
/Research
Malicious Nx npm versions stole secrets and wallet info using AI CLI tools; Socket’s AI scanner detected the supply chain attack and flagged the malware.