
Security News
/Research
Wallet-Draining npm Package Impersonates Nodemailer to Hijack Crypto Transactions
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
docbat is a commandline program that for converting markdown (and some other formats) to 'nice' webpages with costomization
Docbat is a simple javascript utility which takes coverts several file types to html pages. This is useful for build scripts where you want to able to just browse a directory and have see the same content as a README.md but don't have a markdown viewer installed (say as a browser extension).
Docbat provides methods to add formatting to the HTML page such as custom CSS or other constructs after the markdown conversion so that the HTML isn't just raw. Docbat's default options provide simple margins and padding for reasonable view across desktop and mobile device contexts.
npx docbat -i inputfile.md -o outputfile.html
if the -l parameter is included all libraries will be embedded in the page as a single stand alone file with support for code syntax higlighting.
npx docbat -i inputfile.md -o outputfile.html -l
Supported input file types:
Supported output:
Future: Docbat exposes the following file distribution libraries:
simple usage
./docbat-cli.js -i myfile.md -o myoutput.html
type docbat --help for more commandline options
Code syntax highlighting is supported. Here is a Javascript example:
let addTwoNumbers = function(a,b) { return a+ b}
const myObject = {
"one": "this is it,
2: [1,2,3,4,5],
3: { "an embedded object": "I am a js object!", 8 : "eight"}
}
and here is python
"""
Simple python code example
"""
#import myLibrary
def addTwoNumbers(a,b)
return a+b
docbat uses the nodejs javscript runtime along with some packages which are available via the npmjs javascript packaging service.
Technologies:
Key Packages:
For buildings from Source:
For Testing: *
all source is at github:
docbat on github
docbat uses eslint for static code checking and analysis.
npm install eslint --save-dev
./node_modules/.bin/eslint --init
Now run the lint test like this:
./node_modules/.bin/eslint docbat.js
docbat is released under the OSI Approved FreeBSD 2-clause license
Copyright (c) 2011-19, M. A. Chatterjee
All rights reserved.
Redistribution and use in source and binary forms, with or without
modification, are permitted provided that the following conditions are met:
Redistributions of source code must retain the above copyright notice, this
list of conditions and the following disclaimer.
Redistributions in binary form must reproduce the above copyright notice,
this list of conditions and the following disclaimer in the documentation
and/or other materials provided with the distribution.
THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS"
AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDER OR CONTRIBUTORS BE LIABLE
FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER
CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY,
OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
FAQs
docbat is a commandline program that for converting markdown (and some other formats) to 'nice' webpages with costomization
The npm package docbat receives a total of 5 weekly downloads. As such, docbat popularity was classified as not popular.
We found that docbat demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
/Research
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
Security News
This episode explores the hard problem of reachability analysis, from static analysis limits to handling dynamic languages and massive dependency trees.
Security News
/Research
Malicious Nx npm versions stole secrets and wallet info using AI CLI tools; Socket’s AI scanner detected the supply chain attack and flagged the malware.