Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
chanjet-h5-hub
Advanced tools
hsy-h5-hub
实时调度 H5 项目所有子应用独立开发独立部署,但是在部署阶段,会将 dist 上传到 cdn 规定路径下
'/goodsList',
'/custVendorListWillContact',
'/custVendorListWithProblem', // 问题客户
'/custVendorListAll',
'/checkGoods',
'/commoditySharing', // 推荐商品
'/couponSharing', // 促销活动分享页面
'/makePoster', // 海报分享页面
'/Editor', // 添加备注跟进
'/CustDetail', // 客户详情页面
'/extension', // 线上推广分析
'/p-rank',
'/cust-rank', // 客户活跃排行
'/emp-rank',
'/emp-sd',
'/customer',
'/promotion', // 商品推广
'/mshop', // 访客数 | 浏览量 |
'/wechatInvitationFromOldCust',
'/customerManager', // 客户管理
'/customerSupport',
'/promotionFilter',
'/promotionDetails',
'/treescreen',
'/screen',
'/checkboxSelect',
'/SelectPaymentDate',
'/SelectPriceList',
'/SelectReceiptType',
'/SelectCustomerType',
'/custVendorLabel',
'/inviteCustomers',
'/selectSalesmen',
'/activePda',
'/multiGraphShareTo',
'/multiGraphShare',
'/addCustomer',
'/callPlanning',
'/business',
'/createPlan',
'/customerList',
'/routeManager',
'/addRoute',
'/visitSettings',
'/visitTask',
'/imageCollection',
'/visitSummary',
'/promocouponshare', // 分享促销
'/couponlistshare', // 分享优惠券
'/sale',
'/inventory',
'/settings',
'/product',
'/capital'
主应用域名
https://[env-]chanjet-h5-hub.chanjet.com/prefix
// 建议 不需要传递状态
window.$navigateToUrl((url: string));
// 可选 需要传递state时
history.pushState(state, title, url);
- nodejs >= 10.0.0 # nodejs尽量使用最新的 lts 版本,
- vscode # IDE统一使用`vscode`, 内置的辅助插件有助于快速开发
- yarn # 包管理统一使用yarn
- npm.rd.chanjet.com # 必须指定npm私服, 核心依赖只能从私服拉取
以小档案为例演示如何连接本地应用
https://inte-chanjet-h5-hub.chanjet.com/archives#/archives-enter
应用名称=本地开发端口
,archives=8089
,https://inte-chanjet-h5-hub.chanjet.com/archives#/archives-enter?archives=8089
刷新页面
或直接粘贴完整地址进入
修改前
修改后
FAQs
畅捷通H5微前端基座
The npm package chanjet-h5-hub receives a total of 2 weekly downloads. As such, chanjet-h5-hub popularity was classified as not popular.
We found that chanjet-h5-hub demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.