
Security News
/Research
Wallet-Draining npm Package Impersonates Nodemailer to Hijack Crypto Transactions
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
[](https://blitzjs.com)
Run npm install -g blitz
or yarn global add blitz
You can alternatively use npx
blitz new myAppName
cd myAppName
blitz dev
The Blitz community is warm, safe, diverse, inclusive, and fun! LGBTQ+, women, and minorities are especially welcome. Please read our Code of Conduct.
Join our Discord Community where we help each other build Blitz apps. It's also where we collaborate on building Blitz itself.
For questions and longer form discussions, post in our forum.
There's still a lot of work to do, so you are especially invited to join us in building Blitz! A good place to start is The Contributing Guide.
Your financial contributions help ensure Blitz continues to be developed and maintained! We have monthly sponsorship options starting at $5/month.
π View options and contribute at GitHub Sponsors, PayPal, or Open Collective
![]() |
|
![]() |
![]() |
|
![]() |
![]() |
|
![]() |
![]() |
![]() |
Brandon Bayer Creator | Dillon Raphael |
Siddharth Suresh |
Code ownership, pull request approvals and merging, etc (see Maintainers L2)
Simon Knott SuperJSON | JH.Lee SuperJSON |
Issue triage, pull request triage, community encouragement and moderation, etc (see Maintainers L1)
Jeremy Liberman |
Thanks to these wonderful people (emoji key):
This project follows the all-contributors specification. Contributions of any kind welcome!
FAQs
[](https://blitzjs.com)
The npm package blitz receives a total of 3,653 weekly downloads. As such, blitz popularity was classified as popular.
We found that blitz demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago.Β It has 4 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
/Research
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
Security News
This episode explores the hard problem of reachability analysis, from static analysis limits to handling dynamic languages and massive dependency trees.
Security News
/Research
Malicious Nx npm versions stole secrets and wallet info using AI CLI tools; Socketβs AI scanner detected the supply chain attack and flagged the malware.