
Research
Supply Chain Attack on Axios Pulls Malicious Dependency from npm
A supply chain attack on Axios introduced a malicious dependency, plain-crypto-js@4.2.1, published minutes earlier and absent from the project’s GitHub releases.
extract-url
Advanced tools
extractURLs es un módulo de Node.js que hace más fácil poder encontrar todas las url de un texto a partir de un string en formato Markdown.
Este módulo retornará los links encontrados en un arreglo de objetos.
npm install --save extractURLs
/require(extractURLs)/
Ve a la terminal en la carpeta raíz de tu proyecto
Ejecuta:
node input_readline.js
Ingresa un texto en formato Markdown: tu-texto
# Lorem ipsum Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incididunt ut [labore](https://en.wiktionary.org/wiki/labore) et [dolore](https://en.wiktionary.org/wiki/dolore) magna aliqua. Ut enim ad minim veniam, quis nostrud exercitation ullamco laboris nisi ut aliquip ex ea commodo consequat. [foo](http://foo.com). Duis aute irure dolor in reprehenderit in voluptate velit esse cillum dolore eu fugiat nulla pariatur. Excepteur sint occaecat cupidatat non proident, sunt in culpa qui officia deserunt mollit anim id est laborum.; [ { href: 'https://en.wiktionary.org/wiki/labore', text: 'labore' }, { href: 'https://en.wiktionary.org/wiki/dolore', text: 'dolore' }, { href: 'http://foo.com', text: 'foo' }, ]Crear fichero en tu proyecto (ejemplo: fichero.js)
Llamar al módulo con la funcion require()
const extractUrls = require(./index.js);
El modulo integra algunas configuraciones adicionales que permiten tener otros resultados de salida. Un ejemplo se detalla a continuación con las variantes que retorna el modulo para un mismo texto de entrada.
Tipo: Array (Arreglo de Objetos)
Ejemplo:
const str = '# Lorem ipsum Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incididunt ut [labore](https://en.wiktionary.org/wiki/labore) et [dolore](https://en.wiktionary.org/wiki/dolore) magna aliqua. Ut enim ad minim veniam, quis nostrud exercitation ullamco laboris nisi ut aliquip ex ea commodo consequat. [foo](http://foo.com). Duis aute irure dolor in reprehenderit in voluptate velit esse cillum dolore eu fugiat nulla pariatur. Excepteur sint occaecat cupidatat non proident, sunt in culpa qui officia deserunt mollit anim id est laborum.';
[texto descriptivo](http://www.enlace.com)
console.log(extractUrls.MdLink(str));
// => [
{ href: 'https://en.wiktionary.org/wiki/labore', text: 'labore' },
{ href: 'https://en.wiktionary.org/wiki/dolore', text: 'dolore' },
{ href: 'http://foo.com', text: 'foo' },
] ```
console.log(extractUrls.url(str));
// => [ 'https://en.wiktionary.org/wiki/labore', 'https://en.wiktionary.org/wiki/dolore', 'http://foo.com' ] ```
[texto descriptivo]:
console.log(extractUrls.text(str));
// => [ 'labore', 'dolore', 'foo' ] ```
FAQs
modulo de Node.js para extraer links de un string en formato markdown
We found that extract-url demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
A supply chain attack on Axios introduced a malicious dependency, plain-crypto-js@4.2.1, published minutes earlier and absent from the project’s GitHub releases.

Research
Malicious versions of the Telnyx Python SDK on PyPI delivered credential-stealing malware via a multi-stage supply chain attack.

Security News
TeamPCP is partnering with ransomware group Vect to turn open source supply chain attacks on tools like Trivy and LiteLLM into large-scale ransomware operations.