Security News
Research
Data Theft Repackaged: A Case Study in Malicious Wrapper Packages on npm
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
eslint-config-nhsuk
Advanced tools
This repo provides NHSUK's
.eslintrc
as a shareable config.
The config is an extension of
eslint-config-airbnb-base.
Details of the changes can be seen in the exported config defined in
index.js. The main changes are the addition of node
and mocha
environments along with a few small tweaks to the rules. The rule changes
better meet the personal preferences of the repo maintainers.
To install the package run:
npm install eslint-config-nhsuk --save-dev
yarn add eslint-config-nhsuk --dev
The config relies upon several other packages. These are the Peer Dependencies. To get a list of the peerDependencies run the following command:
npm info eslint-config-nhsuk peerDependencies
All peerDependencies need to be installed.
Once the eslint-config-nhsuk
package has been installed it is ready to be
used. This is achieved by specifying nhsuk
in the
extends
section of your
eslint config file.
If there is no existing eslint config file it could be as simple as creating a
file named .eslintrc
with the following content:
{
"extends": "nhsuk"
}
FAQs
ESLint config. Primarily intended for use within NHSUK projects.
The npm package eslint-config-nhsuk receives a total of 487 weekly downloads. As such, eslint-config-nhsuk popularity was classified as not popular.
We found that eslint-config-nhsuk demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 4 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Research
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
Research
Security News
Attackers used a malicious npm package typosquatting a popular ESLint plugin to steal sensitive data, execute commands, and exploit developer systems.
Security News
The Ultralytics' PyPI Package was compromised four times in one weekend through GitHub Actions cache poisoning and failure to rotate previously compromised API tokens.