
Research
Malicious fezbox npm Package Steals Browser Passwords from Cookies via Innovative QR Code Steganographic Technique
A malicious package uses a QR code as steganography in an innovative technique.
Useful modules for developing farrow app
Install via npm or yarn
# via npm
npm install --save farrow
# via yarn
yarn add farrow
add scripts
to your package.json
{
"scripts": {
"dev": "farrow dev",
"build": "farrow build",
"start": "farrow start"
}
}
and then:
npm run dev
for developingnpm run build
for bundling the source codenpm run start
for running the output code of bundlerfarrow
assumes that your source code is in src
folder, and the output code is in dist
folder.
farrow.config.js
is used to configure the behavior of farrow
// farrow.config.js
const { createFarrowConfig } = require('farrow')
module.exports = createFarrowConfig({
server: {
entry: 'index.js',
src: 'src',
dist: 'dist',
// uncomment next-line to debug
// nodeArgs: ['--inspect-brk']
},
// for connecting farrow-api-server and codegen farrow-api-client
// api: [
// {
// src: 'http://localhost:3002/api/todo',
// dist: `${__dirname}/src/api/todo.ts`,
// },
// ],
})
export type Config = {
server?: ServerBundlerOptions | ServerBundlerOptions[] | false
api?: ApiClientOptions | ApiClientOptions[] | false
}
export type ServerBundlerOptions = {
/**
* filename of entry
*/
entry?: string
/**
* folder of source code
*/
src?: string
/**
* folder of output code
*/
dist?: string
/**
* - args for node.js
* - eg. ['--inspect-brk'] for debugging
*/
nodeArgs?: string[]
/**
* - env for node.js
* - eg. { NODE_ENV: 'production' }
* - NODE_ENV = production in `farrow start`
* - NODE_ENV = development in `farrow dev`
*/
env?: NodeJS.ProcessEnv
/**
* other options for esbuild
*/
esbuild?: Omit<BuildOptions, 'entryPoints' | 'outdir' | 'outbase'>
/**
* auto add closest package.json dependenties to esbuild external or not
*/
autoExternal?: boolean
}
export type ApiClientOptions = {
/**
* http address of farrow-api
*/
src: string
/**
* file address of codegen target
*/
dist: string
/**
* codegen options
*/
codegen?: CodegenOptions
/**
* the interval of polling
* default value is 3000ms
*/
pollingInterval?: number
/**
* logger options for polling
*/
logger?: false | ((options: ApiClientOptions) => void)
/**
* transform source code received from server
* it's useful when need to attach custom code snippet
*/
transform?: (source: string) => string
/**
* format source code via codegen
*/
format?: (source: string) => string
}
export type CodegenOptions = {
/**
* emit createApiClient or not
* if set to false, just types will be codegened
*/
emitApiClient?: boolean
}
FAQs
Useful modules for developing Farrow App
The npm package farrow receives a total of 4 weekly downloads. As such, farrow popularity was classified as not popular.
We found that farrow demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
A malicious package uses a QR code as steganography in an innovative technique.
Research
/Security News
Socket identified 80 fake candidates targeting engineering roles, including suspected North Korean operators, exposing the new reality of hiring as a security function.
Application Security
/Research
/Security News
Socket detected multiple compromised CrowdStrike npm packages, continuing the "Shai-Hulud" supply chain attack that has now impacted nearly 500 packages.