
Research
/Security News
9 Malicious NuGet Packages Deliver Time-Delayed Destructive Payloads
Socket researchers discovered nine malicious NuGet packages that use time-delayed payloads to crash applications and corrupt industrial control systems.
gfm-wordpress
Advanced tools
Process GitHub flavored Markdown so it can be pasted directly into WordPress.
I (Jason Smith) use this tool for writing blog posts in a project on GitHub, but then publish them on the IBM Developerworks blog. If you are not blogging for the Cloud Data Services developer advocacy group, I am not sure you will find this very useful. But maybe.
GFM-WordPress does a few things:
media/ subdirectory, so that they work from WordPress"foo@2x.png"), reduce its size so it does not look ridiculousMake a Markdown document in any Git project. You can preview it in GitHub normally. Follow two rules:

media/ relative to your .md file. Reference it like this: @2x suffix, e.g. screenshot@2x.pngmedia/ just like images. Link to them normally, e.g. [example-download]: media/example-project.tar.gzIf you follow these rules, everything will work when you view the document in GitHub, and it will work when you paste into WordPress.
Install with NPM:
npm install --global gfm-wordpress
To use the tool, you have to figure out the "media" location for your post. This is the directory WordPress will store your images, downloads, etc.
There are two ways to figure out the media location: by using the URL of an image already uploaded, or by "guessing."
47/2016/MM where MM is the current month. I have no idea whatsoever what the "47" means. Maybe we are the 47th blog installed on this WordPress server?Once you know your media location, run the tool:
gfm-wordpress README.md --media=47/2016/01
But you can also paste the full URL of an image; gfm-wordpress will extract the media location from that URL.
The HTML will arrive on stdout. Copy all of the HTML and paste it into the blog editor. You should completely overwrite the previous post content. The idea is that all authoring is in Markdown. WordPress only hosts the final HTML.
You must upload all media manually. Just follow the procedure from the Usage section above. As you preview the post, the images should render, because the gfm-wordpress output HTML is already referencing them correctly.
If you do not see the images, one problem I suspect is that they need to be pushed to a CDN of some sort. Try clicking "Insert into post". (You will notice it takes longer than you'd think.) Once it inserts the HTML into your post, just delete that HTML.
If you are on the CDS team, check the blog post of this very file (it is private, so you must be logged in or it will 404).
Apache 2.0
FAQs
Convert GitHub flavored Markdown to Wordpress-ready HTML
We found that gfm-wordpress demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
Socket researchers discovered nine malicious NuGet packages that use time-delayed payloads to crash applications and corrupt industrial control systems.

Security News
Socket CTO Ahmad Nassri discusses why supply chain attacks now target developer machines and what AI means for the future of enterprise security.

Security News
Learn the essential steps every developer should take to stay secure on npm and reduce exposure to supply chain attacks.