
Research
Security News
Lazarus Strikes npm Again with New Wave of Malicious Packages
The Socket Research Team has discovered six new malicious npm packages linked to North Korea’s Lazarus Group, designed to steal credentials and deploy backdoors.
formidable-landers
Advanced tools
Welcome to the HQ of maintaining our visible Formidable projects!
We use yarn
, so make sure to have a current version installed, then install
this project.
$ npm install -g yarn
$ yarn install
Demo the header and footer components by running:
$ yarn demo
and visit http://localhost:5678/.
The usual:
$ yarn run lint
$ yarn run test
# ... or all together ...
$ yarn run check
Before publishing, if you want to test the changes you’ve made to
formidable-landers
, you can build what you have and use npm link
in the repo
where you want to see teh changes.
In formidable-landers
, run:
$ yarn build
then run:
$ npm link
Then, in a repo you want to test, such as formidable.com
, run:
$ npm link formidable-landers
and you should see your changes! 🎉
If npm link
is being futzy or giving you problems, take a look at
lank
which requires a bit more
learning curve and setup, but produces a far more manageable and reliable
way of working with multiple dependent repos at the same time.
When publishing, please make sure to install and use npm@5.6.0
to preserve
file timestamp metadata as it is required for our overall website build and
versions subsequent to 5.6.0
intentionally destroy this metadata:
$ npm install -g npm@5.6.0
$ npm --version
5.6.0
master
.$ npm version major|minor|patch -m "Version %s - INSERT_REASONS"
$ npm publish
$ git push && git push --tags
FAQs
Reusable components for Formidable's marketing sites
The npm package formidable-landers receives a total of 8 weekly downloads. As such, formidable-landers popularity was classified as not popular.
We found that formidable-landers demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 31 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
The Socket Research Team has discovered six new malicious npm packages linked to North Korea’s Lazarus Group, designed to steal credentials and deploy backdoors.
Security News
Socket CEO Feross Aboukhadijeh discusses the open web, open source security, and how Socket tackles software supply chain attacks on The Pair Program podcast.
Security News
Opengrep continues building momentum with the alpha release of its Playground tool, demonstrating the project's rapid evolution just two months after its initial launch.