
Research
/Security News
Contagious Interview Campaign Escalates With 67 Malicious npm Packages and New Malware Loader
North Korean threat actors deploy 67 malicious npm packages using the newly discovered XORIndex malware loader.
dynamic-import-js
Advanced tools
A library to generate an importation file to require all local JS and JSX files.
npm install dynamic-import-js --save
or
yarn add dynamic-import-js --save
Add a file named .dynamic-import-js.json
at the root folder with the following structure:
{
"root": "./path/to/your/root/js/files",
"exceptions": [
"file-1.txt",
"folder/file-2.js",
...
],
"prefixlessFolders": [
"folder-1",
"folder-2/folder-3",
...
]
}
The key root
is the path, relative to the project folder, where all JS
and JSX
files will be scanned.
The key exceptions
is a list of files paths, relative to the root
folder, that will not be included in the generated file.
The key prefixlessFolders
is a list of folders that won't be used to form the assigned global resource. See Naming Pattern.
make-import
commandMerge the following with your packaje.json
file:
{
"scripts": {
"make-import": "node ./node_modules/dynamic-import-js"
}
}
Run the following at the root folder:
npm run make-import
This will create a file named local-modules.js
at the root
path with all the require
statements, globally assigned.
Given a file, relative to root
, named Users/Form.js
, it's respective generated line will be global.UsersForm = require('./Users/Form.js').default
.
Therefore, it is recommended to wisely name the folders, as they will be used to name the assigned global resources.
If, using the example above, the folder Users
is included in the prefixlessFolders
, the generated line would be global.Form = require('./Users/Form.js').default
. This is particularly usefull for generic folders, such as Components
or Screens
.
FAQs
Generates an import file for all your JS and JSX files
The npm package dynamic-import-js receives a total of 5 weekly downloads. As such, dynamic-import-js popularity was classified as not popular.
We found that dynamic-import-js demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
/Security News
North Korean threat actors deploy 67 malicious npm packages using the newly discovered XORIndex malware loader.
Security News
Meet Socket at Black Hat & DEF CON 2025 for 1:1s, insider security talks at Allegiant Stadium, and a private dinner with top minds in software supply chain security.
Security News
CAI is a new open source AI framework that automates penetration testing tasks like scanning and exploitation up to 3,600× faster than humans.