
Research
Shai-Hulud Descends to Hades: Miasma Worm Campaign Spreads with New PyPI Wave
Socket found 37 malicious PyPI wheels that abuse Python startup hooks to launch a Bun-powered credential stealer tied to Mini Shai-Hulud/Miasma.
create-wangqun-app
Advanced tools
Creates a UmiJS application/plugin/block/library using the command line.
$ yarn create umi [appName]
ant-design-pro - Create project with a layout-only ant-design-pro boilerplate, use together with umi block.app - Create project with a simple boilerplate, support typescript.plugin - Create a umi plugin.$ yarn create umi
? Select the boilerplate type (Use arrow keys)
ant-design-pro - Create project with a layout-only ant-design-pro boilerplate, use together with umi block.
❯ app - Create project with a simple boilerplate, support typescript.
plugin - Create a umi plugin.
? Do you want to use typescript? (y/N)
? What functionality do you want to enable? (Press <space> to select, <a> to toggle all, <i> to invert selection)
❯◯ antd
◯ dva
◯ code splitting
◯ dll
create abc/package.json
create abc/.gitignore
create abc/.editorconfig
create abc/.env
create abc/.eslintrc
create abc/.prettierignore
create abc/.prettierrc
create abc/.umirc.js
create abc/mock/.gitkeep
create abc/src/assets/yay.jpg
create abc/src/global.css
create abc/src/layouts/index.css
create abc/src/layouts/index.tsx
create abc/src/pages/index.css
create abc/src/pages/index.tsx
create abc/tsconfig.json
create abc/typings.d.ts
📋 Copied to clipboard, just use Ctrl+V
✨ File Generate Done
yarn create umi command failed这个问题基本上都是因为没有添加 yarn global module 的路径到 PATH 环境变量引起的。
先执行 yarn global bin 拿到路径,然后添加到 PATH 环境变量里。
$ yarn global bin
/usr/local/bin
你也可以尝试用 npm,
$ npm create umi
或者手动安装 create-umi,并执行他,
$ npm install create-umi -g
$ create-umi
Please open an issue here.
MIT
FAQs
Creates a UmiJS application using the command line.
We found that create-wangqun-app demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
Socket found 37 malicious PyPI wheels that abuse Python startup hooks to launch a Bun-powered credential stealer tied to Mini Shai-Hulud/Miasma.

Security News
RubyGems and Bundler 4.0.13 introduced an opt-in cooldown feature that delays newly published gems during dependency resolution.

Security News
pnpm 11.5 now recognizes npm staged publish approvals in release metadata, preventing those releases from being mistaken for lower-trust package publishes.