
Research
/Security News
77 Firefox Extensions Linked to Crypto Wallet and Credential Theft
Socket uncovered 77 linked Firefox extensions, including 40 that steal wallet secrets or credentials and 37 deceptive sports-score shells.
cloudelements-codearchiver
Advanced tools

A simple utility that verifies and archives entire source and build directories, so that that the exact distributable can be re-created at a later time.
The normal use is to first run
$ codearchiver tag <name> <brand> <version>
This command generates a unique tag for later operations: The tag looks
like <name>_<brand>_<version>_<timestamp>. For example,
g2cwinclient_ce_2.0.1_1504464925894. Note that the version should be
the published and displayed version of the brand, and not the underlying
version of any dependancies. When this command runs, it will verify that
the name, brand, and version submitted are consistent with the version
of the code being built.
Once you have a tag, you can then run additional commands:
brand
$ codearchiver brand <tag> <brand root>
This does handlebars substitution on anything in the src/templates
directory into the target/branded directory, using properties
obtained from the <brand root>/<brand>/properties.toml. If that
properties file contains a property named <name>_resources, then it
recursively copies all files listed in that property from <brand root>/<brand> into target/branded
archive
$ codearchiver archive <tag> <directory>
This command will permanently save everything in the directory including source code, intermediate generated files, and all distributables for later use. During execution, you may be required to gain access to upload to the archives folder: follow the prompts on screen.
FAQs
A quick utility to archive code
The npm package cloudelements-codearchiver receives a total of 0 weekly downloads. As such, cloudelements-codearchiver popularity was classified as not popular.
We found that cloudelements-codearchiver demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
Socket uncovered 77 linked Firefox extensions, including 40 that steal wallet secrets or credentials and 37 deceptive sports-score shells.

Security News
NIST disclosed an unreleased AI tool called V-etalon and opened a broad inquiry into NVD modernization after years of automation plans produced no public enrichment system.

Security News
In his AI Council 2026 talk, Feross Aboukhadijeh covers recent package compromises, vulnerability discovery, and a more automated security model.