Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
The command line tool to build, deploy and manage Cordova-based applications.
Apache Cordova allows for building native mobile applications using HTML, CSS and JavaScript. This tool helps with management of multi-platform Cordova applications as well as Cordova plugin integration.
In your command-line on Windows:
c:\> npm install -g cordova
In your terminal on Mac OS X/Linux:
$sudo npm install -g cordova
This simple example demonstrates how Cordova CLI can be used to create a myApp
project with the camera
plugin and run it for android
platform:
cordova create myApp com.myCompany.myApp myApp
cd myApp
cordova plugin add cordova-plugin-camera --save
cordova platform add android --save
cordova requirements android
cordova build android --verbose
cordova run android
Cordova is an open source Apache project and contributors are needed to keep this project moving forward. Learn more on how to contribute on our website.
If you find issues with the Cordova CLI, please follow our guidelines for reporting issues. Please bear in mind that most of cordova-cli
's functionality is implemented in cordova-lib, so that could be the place to report your issue.
Platform-specific issues should be reported in the relevant repositories, such as cordova-android and cordova-ios.
FAQs
Cordova command line interface tool
The npm package cordova receives a total of 36,056 weekly downloads. As such, cordova popularity was classified as popular.
We found that cordova demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 28 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.