
Security News
/Research
Wallet-Draining npm Package Impersonates Nodemailer to Hijack Crypto Transactions
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
Compages is the no-compromise content management system that isn't a CMS.
(this project is kind of a mess right now-- had to get it out early for internal reasons. Don't use it yet!)
Also, Compages is the no-compromise content management system that isn't a CMS.
The goal of Compages is to bring back the intuitive, file-structure-based web authoring experience of the late 1990s without losing any modern features.
It works like this: set up a site project, put whatever user-facing content you want in it (and using whatever HTML/JS/CSS languages you want).
This intuitive method always had the drawback that you lost the use of modern features-- templating, minification, alternate compile-to-html/css/js languages, database-backed-pages etcetcetc. But not anymore: Compages automatically converts Pug/Mustache/etc to HTML, LESS/Sass to CSS, compiles Javascript, and resizes and crops images.
While there may have been reasons in past years to organize projects by a strict hierarchy- CSS one place, HTML templates in another, static resources in yet another- it's no longer necessary. Our programs are smart enough know what goes where from what kind of file it is- so why not organize your content for your benefit, rather than that of the computer?
The intent is to allow the web author to jump as quickly as possible, with as few mental hurdles as possible, into building whatever they want.
Static sites are all the rage right now. Compages will glady operate as a static-site generator (using the venerable Gulp build system), and for most current uses that's absolutely sufficient. But it doesn't limit you: Compages-based sites can be served directly using Express, generating pages as needed. Or you can use Compages as a fallback, serving resources that don't change from a cache or CDN, only invoking the app for dynamic content.
FAQs
Compages is the no-compromise content management system that isn't a CMS.
The npm package compages receives a total of 5 weekly downloads. As such, compages popularity was classified as not popular.
We found that compages demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
/Research
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
Security News
This episode explores the hard problem of reachability analysis, from static analysis limits to handling dynamic languages and massive dependency trees.
Security News
/Research
Malicious Nx npm versions stole secrets and wallet info using AI CLI tools; Socket’s AI scanner detected the supply chain attack and flagged the malware.