Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socketβs threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
[![Blitz.js](https://raw.githubusercontent.com/blitz-js/art/master/github-cover-photo.png)](https://blitzjs.com)
Run npm install -g blitz
or yarn global add blitz
You can alternatively use npx
blitz new myAppName
cd myAppName
blitz dev
The Blitz community is warm, safe, diverse, inclusive, and fun! LGBTQ+, women, and minorities are especially welcome. Please read our Code of Conduct.
Join our Discord Community where we help each other build Blitz apps. It's also where we collaborate on building Blitz itself.
For questions and longer form discussions, post in our forum.
There's still a lot of work to do, so you are especially invited to join us in building Blitz! A good place to start is The Contributing Guide.
Your financial contributions help ensure Blitz continues to be developed and maintained! We have monthly sponsorship options starting at $5/month.
π View options and contribute at GitHub Sponsors, PayPal, or Open Collective
Brandon Bayer Creator | Dillon Raphael |
Siddharth Suresh |
Code ownership, pull request approvals and merging, etc (see Maintainers L2)
Simon Knott SuperJSON | JH.Lee SuperJSON |
Issue triage, pull request triage, community encouragement and moderation, etc (see Maintainers L1)
Jeremy Liberman |
Thanks to these wonderful people (emoji key):
This project follows the all-contributors specification. Contributions of any kind welcome!
FAQs
[![Blitz.js](https://raw.githubusercontent.com/blitz-js/art/master/github-cover-photo.png)](https://blitzjs.com)
The npm package blitz receives a total of 3,617 weekly downloads. As such, blitz popularity was classified as popular.
We found that blitz demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago.Β It has 4 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socketβs threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.