Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
cd extend
npm install --save-dev fp-less
Add these tasks to extend/custom.js
:
'custom:frontend-copy'
'less:frontend-copy'
'custom:once'
'less:once'
'custom:watch'
'less:watch'
On the command line:
fp less[:subtask]
Create a source/_styles/src/less
directory and put all Less code there.
This extension will read one directory deep for files with a .less
extension.
Partials must be nested deeper. Less code will be preprocessed into CSS and
built into the paths.source.cssBld
directory as declared in
patternlab-config.json
.
This extension defaults toward the printing of line comments for debugging
purposes. Doing so provides an unambiguous indication that the CSS was
preprocessed and that direct edits to the CSS should be avoided. If a project
decision is made to style with Less, it would be a good idea to have version
control ignore CSS builds in the source
directory. This would avoid committing
line comments, which could otherwise lead to a morass of conflicts.
Another debugging alternative is writing CSS sourcemaps. (However, this will not
work if line comments are enabled.) Add the following to your pref.yml
file:
less:
dumpLineNumbers: false
sourceMap: true
To write sourcemaps inline, configure as follows:
less:
dumpLineNumbers: false
sourceMap:
sourceMapFileInline: true
'less'
less.dumpLineNumbers
setting in pref.yml
.less.dumpLineNumbers
is not set, will default to printing line comments.'less:frontend-copy'
'custom:frontend-copy'
.frontend-copy
task then copies the CSS to the backend.less.dumpLineNumbers
setting in pref.yml
.'less:no-comment'
'less'
and 'less:once'
but without line comments.less.dumpLineNumbers
setting in pref.yml
.'less:once'
'custom:once'
.'less'
.'less:watch'
'custom:watch'
.source/_styles/src/less
directory for file modifications.less
and overwrites CSS whether or not it has direct edits.'less:watch-no-comment'
'custom:watch'
.source/_styles/src/less
directory for file modifications.less:no-comment
and overwrites CSS whether or not it has direct
edits.FAQs
Less extension for Fepper
The npm package fp-less receives a total of 19 weekly downloads. As such, fp-less popularity was classified as not popular.
We found that fp-less demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.