
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
This is the official Codehawk client.
For more information on what Codehawk is, please visit the website.
Install this module globally, configure your project then simply run codehawk in your project root:
npm install -g codehawkcd /to/your/projecttouch hawk.jsonhawk.json configuration contains your project token, and configure any options in here.codehawkYou will be prompted to login on the first run, using your login token which can be grabbed from your dashboard on Codehawk.app.
To customise your analysis, use the following options, placed in a hawk.json file in the root directory.
| Option | Description | Default |
|---|---|---|
uploadToken | REQUIRED Your project upload token, taken from https://codehawk.app | '' |
extensions | File extensions that should be analyzed. The default is always used, but you can add more extensions. Use the exclude option to skip any of the default extensions. | ['.js', '.jsx', '.ts', '.tsx'] |
excludeFilenames | Filename matches that should be excluded from analysis. The default is always used, but you can add more matches to be excluded. Note that the matching is exact. The exclude list is taken into consideration after the extension list. | ['.d.ts', '.min.js', '.bundle.js'] |
excludeDirectories | Directory matches that should be excluded from analysis (but will still show on Codehawk). Relative to the root. E.g. ['/fixtures', '/test'] | ['/dist', '/bin', '/build'] |
skipDirectories | Directories that should be excluded completely (never sent to Codehawk). The defaults will always be skipped. | ['/node_modules', '/flow-typed', '/coverage'] |
Codehawk supports many types of javascript source out of the box:
Note that Codehawk cannot understand certain obscure syntax or recently released Flow or TypeScript features, but the client will warn you during usage in this case. Please email us in this scenario so that we can improve Codehawk.
For troubleshooting and support, please contact support at support@codehawk.app, or reach out to Sam. Feedback also welcome!
(c) Copyright 2019 Sgb Digital Services Ltd, all rights reserved.
FAQs
CodeHawk client
The npm package codehawk receives a total of 19 weekly downloads. As such, codehawk popularity was classified as not popular.
We found that codehawk demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.