
Research
Malicious fezbox npm Package Steals Browser Passwords from Cookies via Innovative QR Code Steganographic Technique
A malicious package uses a QR code as steganography in an innovative technique.
使用 node-ssh 模块,实现一条命令,自动打包(自动执行 npm run build)并将打包文件快速更新到服务器对应路径,可用于快速发布;支持错误回滚。
使用 node-ssh 模块,实现一条命令,自动打包(自动执行 npm run build)并将打包文件快速更新到服务器对应路径,可用于快速发布;支持错误回滚。
npm i fe-publish
or
yarn add fe-publish
在项目根目录下新建 dtstack.config.js,以 JSON 格式配置以下配置项:
./dist
配置示例
{
"host": "127.0.0.1",
"user": "root",
"sourcePath": "./dist",
"targetPath": "/tmp/dist"
}
在项目中的 package.json 里添加 script
"scripts": {
"pub": "fe-publish"
},
npm run pub
或
fe-publish
自动自动备份、错误回滚功能默认启用,此时 targetPath 必须为一个真实路径,如/tmp/dist,必须要有 dist 这个目录;
FAQs
使用 node-ssh 模块,实现一条命令,自动打包(自动执行 npm run build)并将打包文件快速更新到服务器对应路径,可用于快速发布;支持错误回滚。
We found that fe-publish demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
A malicious package uses a QR code as steganography in an innovative technique.
Research
/Security News
Socket identified 80 fake candidates targeting engineering roles, including suspected North Korean operators, exposing the new reality of hiring as a security function.
Application Security
/Research
/Security News
Socket detected multiple compromised CrowdStrike npm packages, continuing the "Shai-Hulud" supply chain attack that has now impacted nearly 500 packages.