
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
Mod that code like you're mad!
This package allows you to write simple code mods. It allows you to transform JSON, Typescript and plain text files.
npm i -D codemad
This library is meant to be used as a library inside a node utility. The fluent style API and can be chained. The file matching is provided by the glob utility. See the glob documentation for details on what can be passed into the matcher syntax.
// The JSON object is passed into the callback, it expects a serializable object to be written to disk
mod('some file pattern').asJson(json => {
//...
});
// The text is given to a callback, return a transformed text to overwrite the original file
mod('some file pattern').asText(text => {
//...
});
// This mod uses the transformer API from Typescript. Provide a visitor function as a callback
mod('some file pattern').asTypescript(node => {
//...
});
import mod from 'codemad';
mod('config.txt').asText(text => {
return text.replace('hello', 'world');
});
import mod from 'codemad';
interface PackageJson {
version: string;
}
mod('package.json').asJson((json: PackageJson) => {
// JSON can be typed
json.version = '1.0.0'; // Change the JSON
return json; // Important: be sure to return a serializable JSON
}, 2); // The API also can take in an optional number of spaces for indentation
import mod from 'codemad';
mod('src/test.ts').asTypescript((node, modder) => {
if (ts.isExpressionStatement(node)) {
for (let child of node.getChildren()) {
if (ts.isCallExpression(child)) {
return modder.prepend(node, 'console.log("hi");');
}
}
}
});
There are several APIs that you can use with the modder object:
prepend(node: ts.Node, content: string)append(node: ts.Node, content: string)replace(node: ts.Node, content: string)remove(node: ts.Node, content: string)removeFull(node: ts.Node, content: string)The difference between remove() and removeFull() is that the removeFull() version will remove whitespace before and after the node. This is a clean way to remove full statements, for example without leaving whitespace or blank lines in the area of the removed node.
FAQs
Mod that code like you're mad!
We found that codemad demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.