
Security News
/Research
Wallet-Draining npm Package Impersonates Nodemailer to Hijack Crypto Transactions
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
like http-server, only with Jade templates, browserify and LESS preprocessing
fast, lightweight & highly opinionated development server for quickly building prototypes or proof-of-concepts, using Jade, LESS and browserify
$ npm install eider -g
The directory you run eider
in will be served at /
:
$ eider
fires up a server at localhost port 8080
.
Now /foo
(as well as /foo/index.html
) will try to look for /foo/index.jade
, /foo/styles/style.css
will return /foo/styles/styles.less
compiled and /foo/js/index.js
will return a browserified version of that file. Every other request will just try to be resolved by a static asset.
You can also specify a port to be used when starting eider
:
$ eider --port 1337
This is not intended to be used in any kind of production setting, please don't even start to think about anything like that.
The UK's heaviest duck, and its fastest flying.
For the bird nerds: http://www.rspb.org.uk/discoverandenjoynature/discoverandlearn/birdguide/name/e/eider/
MIT © Frederik Ring
FAQs
like http-server, only with Jade templates, browserify and LESS preprocessing
We found that eider demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
/Research
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
Security News
This episode explores the hard problem of reachability analysis, from static analysis limits to handling dynamic languages and massive dependency trees.
Security News
/Research
Malicious Nx npm versions stole secrets and wallet info using AI CLI tools; Socket’s AI scanner detected the supply chain attack and flagged the malware.