
Security News
/Research
Wallet-Draining npm Package Impersonates Nodemailer to Hijack Crypto Transactions
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
Generate and Inject Markdown Table of Contents
This package is ESM only : Node 14+ is needed to use it and it must be imported instead of required.
# install gimtoc globally as binary
npm install -g gimtoc
# install gimtoc as npm dependency
npm install --save gimtoc
# print package version
gimtoc -v
gimtoc --version
# print CLI usage
gimtoc -h
gimtoc --help
# print merged README.md with injected TOC
gimtoc -f README.md -s "Table of Contents"
gimtoc --file README.md --section "Table of Contents"
# update the README.md's section called TOC
gimtoc --file README.md --section 'TOC' --output README.md
# update the README.md's TOC section using pipe
cat README.md | gimtoc -i -s 'TOC' -o README.md
# generate a TOC with BitBucket compatibility (option --anchor)
gimtoc --file README.md --section 'TOC' --anchor --output README.md
import { gimtoc } from 'gimtoc';
const mdContent = `
# Awesome Markdown Documentation
## Table of Contents
## Usage
npm install -g gimtoc
## License
MIT
`;
const injectionSection = 'Table of Contents';
const options = {
// use this option to generate links anchors
// the default value is false
anchors: false
// see https://www.npmjs.com/package/markdown-toc#options for other options
};
gimtoc(mdContent, injectionSection, options)
.then((mdContentWithToc) => console.log(mdContentWithToc));
Output
Print the markdown content with the generated TOC in the injection section
# Awesome Markdown Documentation
## Table of Contents
- [Usage](#usage)
- [License](#license)
## Usage
npm install -g gimtoc
## License
MIT
Gimtoc use markdown-toc to
generate Markdown TOC. To configure the TOC generation, please refer to the
markdown-toc documentation
for options
description.
Title ignored by default
By default, gimtoc use options.firsth1 === false
to remove the markdown title from the generated TOC. You can overwrite this
by setting options.firsth1
to true
.
Injection section ignored by default
Since we perform an injection in a markdown section, the injection section is ignored when generating the TOC.
At the top-level of your project run:
direnv allow
The next time your launch your terminal and enter the top-level of your project,
direnv
will check for changes.
Please follow CONTRIBUTING.md.
Given a version number MAJOR.MINOR.PATCH
, increment the:
MAJOR
version when you make incompatible API changes,MINOR
version when you add functionality in a backwards-compatible manner, andPATCH
version when you make backwards-compatible bug fixes.Additional labels for pre-release and build metadata are available as extensions
to the MAJOR.MINOR.PATCH
format.
See SemVer.org for more details.
Under the MIT license. See LICENSE file for more details.
Gimtoc 2.0.0
This major release fixes important security vulnerability and introduces breaking changes.
Breaking changes
node>=14.16
as compatible engineChanges
Please check the README.md.
FAQs
Generate and Inject Markdown Table of Contents
The npm package gimtoc receives a total of 0 weekly downloads. As such, gimtoc popularity was classified as not popular.
We found that gimtoc demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
/Research
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
Security News
This episode explores the hard problem of reachability analysis, from static analysis limits to handling dynamic languages and massive dependency trees.
Security News
/Research
Malicious Nx npm versions stole secrets and wallet info using AI CLI tools; Socket’s AI scanner detected the supply chain attack and flagged the malware.