
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
#EBHybrid Setup
The ebhybrid command-line utility is meant as a bootstrapping tool for Ekstra Bladets hybrid app platform. The script can set up a blank project or start an app from a git repo. Once set up, the ebhybrid utility takes care of tasks like bundling your source, running the app in various emulators – and even, if you set up the build tool in your source corretly, compile everything in one go.
The ebhybrid utility requires various components to be installed beforehand – and as the installation process for these components change over time, it is a sisyphean task to maintain a one-click installer. So instead, you get a list of things to install under your own steam:
Node.js and npm are usually installed together. Head on over to https://nodejs.org/ to get yours.
The Android SDK lives here: https://developer.android.com/sdk/ – the path of least resistance is to install the entire Android Studio.
The Genymotion emulator is here: https://www.genymotion.com/ – it's a faster Android Emulator. The default one from Google is bordering on useless.
Get Cordova here: https://cordova.apache.org/ – Cordova is the foundation upon which almost all hybrid apps are built.
Install the Telerik appbuilder CLI from here: http://www.telerik.com/appbuilder/command-line-interface. After installing, make sure to run appbuilder login before building using Telerik.
The iOS Simulator is part of Apple's XCode IDE, so you need to install the whole thing to get the juicy morsel that is the emulator.
You also need the ios-sim command-line utility to be able to build directly to the emulator with the ebhybrid utility. This you can install via npm using [sudo] npm install ios-sim -g.
npm install ebhybrid -g
ebhybrid --help
ebhybrid create dirname [ProjectName] [platforms] [--bundleid bundleid] [--git gitaddress]
The available [platforms] are:
[ProjectName] The name of the project. If more than 1 word, use quotes. eg 'Live Score'.
[-- bundleid bundleid] The projects Bundle ID. Should be in the form of com.example.ProjectNameWithOutSpaces
[--git gitaddress] in case a git repo will be used for the source.
In case you didn't add Cordova or Telerik for your project.
ebhybrid add [platform]
Where [platform] should be cordova or telerik. No dash
Once Cordova is added to your project, you can add plugins and emulate with
EBHybrid, you can do this from the root of your project or from the src
folder.
The src directory should contain a file called .ebplugins, if it doesn't
exist, it will be created for you. This file contains the list of Cordova
Plugins needed for the project. You can add a plugin directly to the file, or
use the command line.
ebhybrid cordova add [plugin]
To emulate using EBHybrid, there must be a build folder in the src.
Everything in that folder will be copied to the appropriate folder in the
Cordova directory and run the emulator.
ebhybrid cordova emulate [platform]
Where platform must be ios or android
Once the Telerik is setup, it is possible to use EBHybrid to build and emulate using appbuilder.
Plugins have to be added manually as appbuilder asks for a specific version, and Telerik has some different versions than Cordova. But Telerik offers all the core plugins as default.
appbuilder plugin add [plugin]
ebhybrid telerik emulate [platform]
Where platform must be ios or android.
It is required, that there exists a build folder in src. As it will be
copied to the telerik folder.
This is the file structure of just creating a project.
EBHybrid Project
┣━ .ebhybrid
┗━ src
┣━ .preprocessor.js
┣━ gulpfile.js
┣━ webpack.config.js
┣━ htdocs
┃ ┗━ template.html
┣━ img
┃ ┗━ EBUD.png
┣━ js
┃ ┗━ app.js
┗━ less
┗━ style.less
It is important that if you have a different src structure, after building your
source, there is a build folder.
FAQs
EBHybrid Setup module
The npm package ebhybrid receives a total of 4 weekly downloads. As such, ebhybrid popularity was classified as not popular.
We found that ebhybrid demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.