
Security News
/Research
Wallet-Draining npm Package Impersonates Nodemailer to Hijack Crypto Transactions
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
How to get up-and-running with NodeSource Certified Modules!
npm config set registry https://yourregistry.nodesource.io
npm ping
, which should print a simple JSON object, to validate you have network access to the repositorynpm login
npm whoami
, which should print your email address, to validate you have logged in successfullynpm install
will use your certified modules registry to screen for qualitySometimes you need a package that fails certification. To do this we provide a tool to curate your NodeSource Certified Modules' whitelist. This list overrides any certification criteria failures and allows npm
to install packages that it would otherwise prevent.
For the nscm
tool and its documentation, check out https://npmjs.org/package/nscm
You can leverage .npmrc
files per folder to allow easier control of which registry is being used for a project. This is convenient if you work on open source modules but don't want to have to switch your registry back and forth between NodeSource Certified Modules and the npmjs.org registry.
.npmrc
file in your project folder.npmrc
file, add the line: registry = https://yourregistry.nodesource.io
chmod 0600 .npmrc
npm login
as above (if not already logged in to this registry)Currently publishing is not supported by NodeSource Certified Modules, so you will need to switch back to the https://npmjs.org registry whenever you want to publish a module. If you do this a lot, you may want to consider the advanced setup using .npmrc
files.
npm config set registry https://registry.npmjs.org/
npm login
and use your npmjs.org credentialsTo submit a bug report, please create an issue at GitHub.
If you'd like to contribute code to this project, please read the CONTRIBUTING.md document.
certified is Copyright (c) 2017 NodeSource and licensed under the MIT license. All rights not explicitly granted in the MIT license are reserved. See the included LICENSE.md file for more details.
FAQs
NodeSource Certified Modules How-To
The npm package certified receives a total of 1 weekly downloads. As such, certified popularity was classified as not popular.
We found that certified demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
/Research
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
Security News
This episode explores the hard problem of reachability analysis, from static analysis limits to handling dynamic languages and massive dependency trees.
Security News
/Research
Malicious Nx npm versions stole secrets and wallet info using AI CLI tools; Socket’s AI scanner detected the supply chain attack and flagged the malware.