Research
Security News
Malicious npm Package Targets Solana Developers and Hijacks Funds
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
grunt-cdn-ideame
Advanced tools
Properly prepends a CDN url to those assets referenced with absolute paths (but not URLs)
Grunt plugin for properly prepending a CDN url to those assets referenced with absolute paths (but not URLs)
Install this grunt plugin next to your project's gruntfile with: npm install grunt-cdn
Then add this line to your project's grunt.js
gruntfile:
grunt.loadNpmTasks('grunt-cdn');
Then specify your config:
grunt.initConfig({
cdn: {
dist: {
/** @required - string (or array of) including grunt glob variables */
src: ['./static/*.html', './static/*.css', './static/*.soy'],
/** @optional - if provided a copy will be stored without modifying original file */
dest: './dist/static/',
/** @required - root URL of your CDN (may contains sub-paths as shown below) */
cdn: 'http://cdn.cloudfront.net/container/'
}
}
});
With the following input
<!DOCTYPE html>
<html>
<head>
<title>Mural.ly</title>
<link rel="stylesheet" type="text/css" href="/static/compiled.css?v=13512tyu3kds" />
</head>
<body id="landing-page">
...
</body>
</html>
After running the task the output looks like
<!DOCTYPE html>
<html>
<head>
<title>Mural.ly</title>
<link rel="stylesheet" type="text/css" href="http://cdn.cloudfront.net/container/static/compiled.css?v=13512tyu3kds" />
</head>
<body id="landing-page">
...
</body>
</html>
As you can see we maintain the "container" pathname in this case, and we also keep the original query strings. This task is really handy if you upload stuff from your CI to make it transparent to developers.
NOTE: This task only works with "absolute" paths. We consider paths starting with . (or ..) as relative, and with / absolute. We're using the same aproach as the *NIX file-system.
FAQs
Properly prepends a CDN url to those assets referenced with absolute paths (but not URLs)
The npm package grunt-cdn-ideame receives a total of 0 weekly downloads. As such, grunt-cdn-ideame popularity was classified as not popular.
We found that grunt-cdn-ideame demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
Security News
Research
Socket researchers have discovered malicious npm packages targeting crypto developers, stealing credentials and wallet data using spyware delivered through typosquats of popular cryptographic libraries.
Security News
Socket's package search now displays weekly downloads for npm packages, helping developers quickly assess popularity and make more informed decisions.