Security News
Research
Data Theft Repackaged: A Case Study in Malicious Wrapper Packages on npm
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
campaignmonitor
Advanced tools
Universal javascript wrapper for campaign monitor api
Compatible with node, webpack, and browserify
$ npm i --save campaignmonitor
import campaignMonitor from 'campaignmonitor'
You must initialize the object with options before using.
import campaignMonitor from 'campaignmonitor'
const api = campaignMonitor(options)
API key used for campaign monitor authentication - campaign monitor docs
Uses Campaign Monitor subscribers API
addSubscriber
Adds subscriber to specified list
Params
{string} - list ID - API Subscriber List ID from Campaign Monitor
{object} - request body - should map to fields in subscriber api docs
Returns
To run the full suite, run
npm test
npm start
Runs build, test, and lint watchers
npm run tdd
Run test watcher
npm run lint
Run linter
npm run build
Builds the production assets suitable for release
npm run release
Builds, git tags release, and publishes to npm
Every commit to master defaults to a patch bump. If it needs to be a minor or major, ENSURE YOU DO THE FOLLOWING:
If you would like to create a release, add the following to the merge commit message when you merge a PR:
release v+<bump type>
Where <bump type>
is one of:
This will:
FAQs
Wrapper for campaign monitor api
The npm package campaignmonitor receives a total of 1 weekly downloads. As such, campaignmonitor popularity was classified as not popular.
We found that campaignmonitor demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Research
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
Research
Security News
Attackers used a malicious npm package typosquatting a popular ESLint plugin to steal sensitive data, execute commands, and exploit developer systems.
Security News
The Ultralytics' PyPI Package was compromised four times in one weekend through GitHub Actions cache poisoning and failure to rotate previously compromised API tokens.