
Research
Malicious npm Packages Impersonate Flashbots SDKs, Targeting Ethereum Wallet Credentials
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
get-deps-cmd
Advanced tools
Read a package.json and get the commands to install all dependencies for yarn and/or npm.
Yarn:
yarn add global get-deps-cmd
NPM:
npm install -g get-deps-cmd
Options:
-v, --version output the version number
-p, --path <file> path to package.json
-y, --yarn-only only show yarn commands
-n, --npm-only only show npm commands
-s, --show-versions get exact versions for packages
-r, --prod-only get only dependencies and not dev dependencies
-h, --help display help for command
running get-deps-cmd
in a directory containing a package.json file will output the following:
YARN DEPENDENCIES:
yarn add commander
YARN DEV DEPENDENCIES:
yarn add -D @commitlint/cli @commitlint/config-conventional @typescript-eslint/eslint-plugin @typescript-eslint/parser commitizen cz-conventional-changelog eslint eslint-config-prettier eslint-plugin-prettier husky lint-staged organize-imports-cli prettier pretty-quick standard-version typescript
NPM DEPENDENCIES:
npm install commander
NPM DEV DEPENDENCIES:
npm install --save-dev @commitlint/cli @commitlint/config-conventional @typescript-eslint/eslint-plugin @typescript-eslint/parser commitizen cz-conventional-changelog eslint eslint-config-prettier eslint-plugin-prettier husky lint-staged organize-imports-cli prettier pretty-quick standard-version typescript
Built by @aniravi24 and @enaluz.
FAQs
A simple way to get an install command from all your dependencies
The npm package get-deps-cmd receives a total of 3 weekly downloads. As such, get-deps-cmd popularity was classified as not popular.
We found that get-deps-cmd demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
Security News
Ruby maintainers from Bundler and rbenv teams are building rv to bring Python uv's speed and unified tooling approach to Ruby development.
Security News
Following last week’s supply chain attack, Nx published findings on the GitHub Actions exploit and moved npm publishing to Trusted Publishers.