Security News
Research
Data Theft Repackaged: A Case Study in Malicious Wrapper Packages on npm
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
gitbook-plugin-theme-ncbi
Advanced tools
Pre-alpha state. Do not use!
For development (as opposed to authoring)
PATH
.Create a new GitHub repository, under your own account, to hold the static content. Enter a name and a description. Do NOT check "Initialize this repository with a README".
On the next screen, click "Import code", and enter "https://github.com/Klortho/ncbi-static-template.git". Then click "Begin import".
In case you're wondering why we don't recommend using GitHub's "fork" feature to start your new repo, there are many reasons. The main reason is that you can only have one fork of a given repo on GitHub, whereas you might need to manage several static sites.
Create a new GitBook, and wire it up to this GitHub repo.
What that finishes, various resources become available on GitBook.com to help you manage and author your content, at these URLs:
You should also be able to view the published site, with NCBI styling:
Add collaborators:
While you should be able to do most editing and administrative operations from the GitBook.com site, it can occasionally be useful to slip those surly bonds, and build your project locally.
To do so, clone your repo to your local machine, and install dependencies:
git clone git@github.com:{user}/{repo}.git
cd {repo}
npm install
gitbook install
To build your gitbook:
FIXME: not working at the moment.
gitbook build
If you have GitBook / GitHub integration set up correctly, then pushing to GitHub will cause GitBook to rebuild the site.
FAQs
Theme for NCBI static content rendered by GitBook
The npm package gitbook-plugin-theme-ncbi receives a total of 0 weekly downloads. As such, gitbook-plugin-theme-ncbi popularity was classified as not popular.
We found that gitbook-plugin-theme-ncbi demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Research
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
Research
Security News
Attackers used a malicious npm package typosquatting a popular ESLint plugin to steal sensitive data, execute commands, and exploit developer systems.
Security News
The Ultralytics' PyPI Package was compromised four times in one weekend through GitHub Actions cache poisoning and failure to rotate previously compromised API tokens.