
Security News
/Research
Wallet-Draining npm Package Impersonates Nodemailer to Hijack Crypto Transactions
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
eslint-config-quintoandar-base
Advanced tools
ESLint Shareable Config for QuintoAndar's Base JS projects
This package provides QuintoAndar's .eslintrc for PWA as an extensible shared config.
npm install --save-dev eslint-config-quintoandar-base
Install the correct versions of each package required, which are listed by the command:
npm info "eslint-config-quintoandar-base@latest" peerDependencies
You can use this shortcut in NPM+5 to install all peer deps:
npx install-peerdeps --dev eslint-config-quintoandar-base
In your project, create a file .eslintrc.json
and extends this project:
{
"extends": "eslint-config-quintoandar-base"
}
Just run:
npm run lint
Just run:
npm run test
We extends Airbnb's configs and add new rules specific to QuintoAndar's PWA projects.
We use SemVer for versioning. For the versions available, see the CHANGELOG.md
Please read CONTRIBUTING.md for details on our code of conduct, and the process for submitting pull requests to us.
You can take a look in our roadmap here.
Add the following line in your markdown readme:

FAQs
ESLint Shareable Config for QuintoAndar's Base JS projects
The npm package eslint-config-quintoandar-base receives a total of 0 weekly downloads. As such, eslint-config-quintoandar-base popularity was classified as not popular.
We found that eslint-config-quintoandar-base demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 4 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
/Research
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
Security News
This episode explores the hard problem of reachability analysis, from static analysis limits to handling dynamic languages and massive dependency trees.
Security News
/Research
Malicious Nx npm versions stole secrets and wallet info using AI CLI tools; Socket’s AI scanner detected the supply chain attack and flagged the malware.