
Research
Malicious fezbox npm Package Steals Browser Passwords from Cookies via Innovative QR Code Steganographic Technique
A malicious package uses a QR code as steganography in an innovative technique.
do-ddd
is a command-line tool designed to automate domain driven design abstractions on code. It generates scaffolding for your DDD-based Node.js projects. It can -
You can install do-ddd globally using npm:
npm install -g do-ddd
Once installed, you can use the do-ddd
command to generate the necessary files. Here's how it works:
I[SomethingSomething]Request.ts
I[SomethingSomething]Response.ts
IAuthenticationRequest.ts
export const IAuthenticationRequest = {userEmail: String, password: String}
IAuthenticationResponse.ts
export const IAuthenticationResponse = {authCode: String}
do-ddd generate
This will create:
[SomethingSomething]UseCase.ts
[SomethingSomething]Controller.ts
To contribute or modify the project, you can clone the repository and install the dependencies:
git clone https://github.com/your-username/do-ddd.git
cd do-ddd
npm install
Build the project:
npm run build
Link the project for local testing:
npm run link
This project is licensed under the ISC License. See the LICENSE file for details.
FAQs
Automates some of the Domain Driven Design pieces for faster development
The npm package do-ddd receives a total of 2 weekly downloads. As such, do-ddd popularity was classified as not popular.
We found that do-ddd demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
A malicious package uses a QR code as steganography in an innovative technique.
Research
/Security News
Socket identified 80 fake candidates targeting engineering roles, including suspected North Korean operators, exposing the new reality of hiring as a security function.
Application Security
/Research
/Security News
Socket detected multiple compromised CrowdStrike npm packages, continuing the "Shai-Hulud" supply chain attack that has now impacted nearly 500 packages.