Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
create-bridge-app
Advanced tools
The easiest way to get started with Bridge is by using create-bridge-app
. This CLI tool enables you to quickly start building a new Bridge application, with everything set up for you.
You can create a new project interactively by running:
npx create-bridge-app@latest
# or
yarn create bridge-app
# or
pnpm create bridge-app
You will be asked for the name of your project.
create-bridge-app
allows you to create a new Bridge app within seconds. It is officially maintained by the creators of Bridge, and includes a number of benefits:
npx create-bridge-app@latest
(with no arguments) launches an interactive experience that guides you through setting up a project.FAQs
Create Bridge-powered Express app with one command
The npm package create-bridge-app receives a total of 3 weekly downloads. As such, create-bridge-app popularity was classified as not popular.
We found that create-bridge-app demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.