
Research
NPM targeted by malware campaign mimicking familiar library names
Socket uncovered npm malware campaign mimicking popular Node.js libraries and packages from other ecosystems; packages steal data and execute remote code.
grandmas-own-jsx
Advanced tools
You no longer need to write JSX like all your boring colleagues.
Look over your shoulder, at your colleague's code. You see this:
import React from 'react';
const MyComponent = () => {
return (
<div className="container">
<h1>A Boring Component</h1>
<p>Readable syntax is for suckers.</p>
</div>
);
}
Now, chuckle to yourself. Revel in your superiority, as you look back at your own, equivalent code:
//👵📚
// 🎁 div className="container"
// 🎩 h1
// 💖 _ "A Lovely Component"
// 👕 p
// 👵 _ "Syntax just like in one of Grandma's old recipe book"
import React from 'react';
const MyComponent = () => {
return "👵";/*
🎁
🎩
💖
👕
👵
*/
}
You can mess about with a demo here.
Install it:
npm install --save grandmas-own-jsx
Add this to your .babelrc
file:
"plugins": [
"grandmas-own-jsx"
]
or, depending on your Babel version:
"plugins": [
"module:grandmas-own-jsx"
]
Consider your life choices.
At the start of your file, you declare a list of recipes. You use a '👵📚'
to signal you're starting the recipe book.
//👵📚
// 🥰 div className="foo" title="bar" <-- the emoji is the key we will use, followed by the attributes assigned to it
// 🥳 MyComponent className=foo <-- we can also use variables and custom components
To then actually render those components, use a '👵'
to signal that we're about to reference Grandma's recipes.
Then, we show what the DOM structure should be, showing what is a child of what.
const MyApp = '👵';/*
🥰
🥳
*/
I really liked the joke of "Grandma's Old Recipe Book", since there's a reference list at the top. As I started to write this README I realised it really wasn't that funny. Covid-19 is testing me.
FAQs
A custom JSX transpiler that uses 👵 because reasons.
The npm package grandmas-own-jsx receives a total of 6 weekly downloads. As such, grandmas-own-jsx popularity was classified as not popular.
We found that grandmas-own-jsx demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Socket uncovered npm malware campaign mimicking popular Node.js libraries and packages from other ecosystems; packages steal data and execute remote code.
Research
Socket's research uncovers three dangerous Go modules that contain obfuscated disk-wiping malware, threatening complete data loss.
Research
Socket uncovers malicious packages on PyPI using Gmail's SMTP protocol for command and control (C2) to exfiltrate data and execute commands.