
Research
npm Malware Targets Telegram Bot Developers with Persistent SSH Backdoors
Malicious npm packages posing as Telegram bot libraries install SSH backdoors and exfiltrate data from Linux developer machines.
cra-template-brightsign-web-app
Advanced tools
Create and publish a web app onto a BrightSign player.
Ensure that you have the right version of Node.js installed (14.17.6
) as this is what is best supported by BrightSign devices at the moment.
This project is a custom create-react-app
template. Clone the repo and then run the following command in the root of your project directory to instantiate the project. Be sure to set the file:/
path to the location where /template
and /template.json
reside.
npx create-react-app bs-app --template file:/path/to/dev-cookbook/cra-template-brightsign-app
Once the app is ready, simply follow the instructions in the project readme
to deploy to your device. When you run the app locally using yarn start
, mocked @brightsign/
JavaScript APIs will be used.
For more info, see /template/README.md
To contribute enhancements or fixes to the template, please follow these steps:
Fork and Clone: Start by forking the dev-cookbook
repository. Then, clone your fork locally to make changes.
Make Changes: Navigate to the specific template you wish to improve within the dev-cookbook directory. Apply your changes there.
Test Locally: Test the template by instantiating using the command mentioned in the "Using the Template" section. This step ensures your changes work as expected within the create-react-app workflow.
Commit Changes: After testing your changes, commit them to your fork. Ensure your commit messages clearly describe the enhancements or fixes made. Push your commits to GitHub.
Submit a Pull Request (PR): Submit a pull request to the main dev-cookbook repository. Be sure to fill out the predefined PR sections as fully as possible.
Code Review: Once your PR is submitted, it will be reviewed by a BrightSign team member. Be open to feedback and ready to make further adjustments based on their suggestions.
FAQs
Create and publish a web app onto a BrightSign player.
The npm package cra-template-brightsign-web-app receives a total of 3 weekly downloads. As such, cra-template-brightsign-web-app popularity was classified as not popular.
We found that cra-template-brightsign-web-app demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Malicious npm packages posing as Telegram bot libraries install SSH backdoors and exfiltrate data from Linux developer machines.
Security News
pip, PDM, pip-audit, and the packaging library are already adding support for Python’s new lock file format.
Product
Socket's Go support is now generally available, bringing automatic scanning and deep code analysis to all users with Go projects.