
Research
Security News
Lazarus Strikes npm Again with New Wave of Malicious Packages
The Socket Research Team has discovered six new malicious npm packages linked to North Korea’s Lazarus Group, designed to steal credentials and deploy backdoors.
Cody
is a command line utility designed to help web development at the beginning
of the developer's career. Cody
takes care of the environment and let you focus on the code.

Setting up a simple server (NIGIX, Apache) it's a difficult business, setting > up Grunt / Gulp to transpile LESS or SASS is even more difficult (especially if you don't know Javascript). Put the pieces together with tools like Webpack or Browserify it is simply impossible to the beginner.
I think those guys need a tool that allows them focus on getting an Hello World done, not getting the exercise being executed on their machine!
(*) to be done
Cody
comes as a globally available command line tool which you install with NodeJS
:
npm install -g cody-cli
Once it is installed you can easily bootstrap a new web project:
// setup a new empty folder
mkdir my-web-project
cd my-web-project
// this run the magic!
cody
You project will be available at http://localhost:8080
immediately, and every
change in your project's folder will be reflected in the server.
Cody
is able to understand less
and sass
:
foo.less -> foo.less.css
foo.scss -> foo.scss.css
All your transpiled code supports sourcemaps out of the box!
When you use CSS frameworks (or utilities packages) from NPM
or Bower
you can import those modules by name omitting the package directory:
// Sass
@import "bootstrap/scss/bootstrap"
Use the .jsx
extension to access all the es2015
and react
presets for Babel.
All your transpiled code supports sourcemaps out of the box!
.less
, .sass
and .jsx
files are transpiled automatically every time you save them. You just need to refresh your browser window.
All the files inside the folders listed below are made available to the running server without any transformation:
FAQs
Frontend web development server for modern web apps
The npm package cody-cli receives a total of 2 weekly downloads. As such, cody-cli popularity was classified as not popular.
We found that cody-cli demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
The Socket Research Team has discovered six new malicious npm packages linked to North Korea’s Lazarus Group, designed to steal credentials and deploy backdoors.
Security News
Socket CEO Feross Aboukhadijeh discusses the open web, open source security, and how Socket tackles software supply chain attacks on The Pair Program podcast.
Security News
Opengrep continues building momentum with the alpha release of its Playground tool, demonstrating the project's rapid evolution just two months after its initial launch.