
Research
Malicious npm Package Brand-Squats TanStack to Exfiltrate Environment Variables
A brand-squatted TanStack npm package used postinstall scripts to steal .env files and exfiltrate developer secrets to an attacker-controlled endpoint.
create-ts-index
Advanced tools
npm install create-ts-index --save-dev
ctix next generation export generation tool. ctix use TypeScript compiler API. So Many problem solve in create-ts-index. For example, separate project(using by tsconfig.json) and support default function, auto detect file that have export statement, etc. I need more help for improvement at ctix.
index.ts file create for exportation. If don't have business logic in index.ts that use to only exportation, create-ts-index help easy importing. Or if you have library project need this export process(for example, blueprint.js etc ...). cti(create-ts-index) create export index.ts file.
For example, sample directory below.
src/
app.ts
component/
Nav.ts
Button.ts
create-ts-index create sub-command create index.ts file below.
src/
app.ts
> index.ts
// created from 'create-ts-index'
export * from './component';
export * from './app';
component/
Nav.ts
Button.ts
> index.ts
// created from 'create-ts-index'
export * from './Nav';
export * from './Button';
create-ts-index entrypoint sub-command create index.ts file below.
src/
app.ts
component/
Nav.ts
Button.ts
> entrypoint.ts
// created from 'create-ts-index'
export * from './src/app.ts'
export * from './src/component/Nav.ts'
export * from './src/component/Button.ts'
fileFirst: boolean export list create filefirst. default falseaddNewline: boolean deside add newline file ending. default trueuseSemicolon: boolean deside use semicolon line ending. default trueuseTimestamp: boolean deside use timestamp(YYYY-MM-DD HH:mm) top line comment. default falseincludeCWD: boolean deside include cwd directory. default trueexcludes: string[] pass exclude directory. default exclude directory is ['@types', 'typings', '__test__', '__tests__']fileExcludePatterns: string[] pass exclude filename pattern. default exclude patterns is []targetExts: string[] pass include extname. default extname is ['ts', 'tsx']. extname pass without dot charactor.globOptions: glob.IOptions pass include glob options. node-glob option use it.quote deside quote charactor. Single quete charactor use to default.verbose verbose log message displywithoutComment remove create-ts-index comment that top of line in index.tswithoutBackupFile Don't create backupfile if already exists target fileoutput index.ts or entrypoint.ts filename change-f --filefirst export list create filefirst, no option false, option true-n --addnewline deside add newline file ending. no option true, option false-s --usesemicolon deside use semicolon line ending. no option true, option false-t --usetimestamp deside use timestamp(YYYY-MM-DD HH:mm) top line comment. no option false, option true-c --includecwd deside include cwd directory. no option true, option true-e --excludes [comma separated exclude directories] pass exclude directory. default exclude directory is ['@types', 'typings', '__test__', '__tests__']-i --fileexcludes [comma separated extname] pass exclude filename pattern. default exclude patterns is []-x --targetexts [comma separated extname] pass include extname. default extname is ['ts', 'tsx']. extname pass without dot charactor.-q --quote deside quote charactor. default quote charactor single quote-v --verbose disply verbose log message. no option false, option true-w --withoutcomment remove create-ts-index comment that top of line in index.ts-b --withoutbackup Don't create backupfile if already exists target file-o --output index.ts or entrypoint.ts filename changeconst tsiw = new TypeScritIndexWriter();
const option = TypeScritIndexWriter.getDefaultOption('./src');
(async () => {
await tsiw.create(option);
// or
await tsiw.createEntrypoint(option);
})();
(async () => {
const option = CreateTsIndexOption.getOption({});
const createCommand = new CreateCommandModule();
await createCommand.do(process.cwd(), option);
});
cli use git-style sub-command
.ctirc file# basic usage
cti create ./src # or cti create ./src
## or
cti entrypoint ./src # or cti create ./src
# without newline
## create sub-command, create sub-command is a default command
cti -n ./src
cti create -n ./src
## entrypoint sub-command
cti entrypoint -n ./src
# custom exclude directories
cti create -n -e @types,typings,__test__,__tests__,pages ./src
## or
cti entrypoint -n -e @types,typings,__test__,__tests__,pages ./src
# clean index.ts
cti clean ./src # or cti clean ./src
# loop through every sub-directory in current path (thanks Mohsen)
for f in *; do cti create ./$f; done
# Pass variadic directories
cti create ./src/server ./src/client ./src/module
create-ts-index cli support .ctirc configuration file. Available name is only .ctirc. .ctirc configuration file can applied by each target directories and script working directory. Every configuration overwrited same feature. Also cti cli arguments forced applied. And .ctirc file can write json5 format. json5 spec. can comment and more feature.
See below search, apply order.
# execute on /Users/cti/github/create-ts-index
sh> cti create ./example/type01
# search configuration file on "/Users/cti/github/create-ts-index"
# search configuration file on "/Users/cti/github/create-ts-index/example/type01"
# apply configuration by "/Users/cti/github/create-ts-index"
# apply configuration by "/Users/cti/github/create-ts-index/example/type01"
# every configuration is overwrited
You can use cli for .ctirc file creation.
# create current directory
> cti init
# create multiple directory
> cti init ./example/type03 ./example/type02
FAQs
Automatic create index.ts file
The npm package create-ts-index receives a total of 27,623 weekly downloads. As such, create-ts-index popularity was classified as popular.
We found that create-ts-index demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
A brand-squatted TanStack npm package used postinstall scripts to steal .env files and exfiltrate developer secrets to an attacker-controlled endpoint.

Research
Compromised SAP CAP npm packages download and execute unverified binaries, creating urgent supply chain risk for affected developers and CI/CD environments.

Company News
Socket has acquired Secure Annex to expand extension security across browsers, IDEs, and AI tools.