
Research
Namastex.ai npm Packages Hit with TeamPCP-Style CanisterWorm Malware
Malicious Namastex.ai npm packages appear to replicate TeamPCP-style Canister Worm tradecraft, including exfiltration and self-propagation.
ember-cli-codemirror-shim
Advanced tools
ES6 accessible module for importing codemirror from npm.
# From the command line:
ember install ember-cli-codemirror-shim
Create a codemirror configuration object in your ember-cli-build.js file to specify what codemirror assets you would like to include in your project:
var EmberAddon = require('ember-cli/lib/broccoli/ember-addon');
module.exports = function(defaults) {
var app = new EmberAddon(defaults, {
codemirror: {
addons: ['mode/simple.js', 'mode/multiplex.js', 'comment/comment.js'],
modes: ['xml', 'javascript', 'handlebars', 'htmlmixed', 'css'],
themes: ['panda-syntax'],
keymaps: ['sublime']
}
});
return app.toTree();
};
IMPORTANT: The CodeMirror source repository keymaps, modes and theme files follow a consistent structure, so you only need to pass the name for each of these configs. The CodeMirror addons are organized differently and do not have a uniform file structure. Because of this you have to pass in the file path to the addon you would like to import relative to the CodeMirror addons directory: CodeMirror Github Addons Dir.
Eg, to import the markdown fold addon, you would pass:
codemirror: {
addons: ['fold/markdown-fold.js']
}
The CodeMirror Manual has details on modes, themes, keymaps, etc.
// Some Awesome Component
import Ember from 'ember';
import CodeMirror from 'codemirror';
// Do amazing things!
BIG THANK YOU TO:
This shim wouldn't be possible without the work they have done.
FAQs
The default blueprint for ember-cli addons.
The npm package ember-cli-codemirror-shim receives a total of 9 weekly downloads. As such, ember-cli-codemirror-shim popularity was classified as not popular.
We found that ember-cli-codemirror-shim demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
Malicious Namastex.ai npm packages appear to replicate TeamPCP-style Canister Worm tradecraft, including exfiltration and self-propagation.

Product
Explore exportable charts for vulnerabilities, dependencies, and usage with Reports, Socket’s new extensible reporting framework.

Product
Socket for Jira lets teams turn alerts into Jira tickets with manual creation, automated ticketing rules, and two-way sync.