
Research
Malicious npm Packages Impersonate Flashbots SDKs, Targeting Ethereum Wallet Credentials
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
gem-mine-cdn-cs
Advanced tools
用于NodeJS侧上传文件夹到CDN服务
内部包,API可能会调整,请锁定版本使用
const uploadToCS = require('gem-mine-cdn-cs')
try {
await uploadToCS({
uploadOrigin: 'http://cs.101.com', // 域名
bucket: 'dev_content_manage_portal_web', // 共享平台应用名
path: 'gem-mine-docs-test', // 服务器路径
key, // access_key,暂未实现,无需传入
secret, // access_secret,暂未实现,无需传入
dist, // 要上传的文件路径
complete() {
logger.done('CDN 文件上传完毕')
},
shouldUploadMapFile: false,// 自动过滤.map文件
override: false,// 是否采用同名文件冲突覆盖策略
ignoreFiles: [], // 过滤的文件名,用indexOf判断,默认为['index.html', 'version.json', '.DS_Store']
})
} catch (e) {
// e
}
FAQs
gem-mine cs cdn
The npm package gem-mine-cdn-cs receives a total of 2 weekly downloads. As such, gem-mine-cdn-cs popularity was classified as not popular.
We found that gem-mine-cdn-cs demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 4 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
Security News
Ruby maintainers from Bundler and rbenv teams are building rv to bring Python uv's speed and unified tooling approach to Ruby development.
Security News
Following last week’s supply chain attack, Nx published findings on the GitHub Actions exploit and moved npm publishing to Trusted Publishers.