
Research
/Security News
9 Malicious NuGet Packages Deliver Time-Delayed Destructive Payloads
Socket researchers discovered nine malicious NuGet packages that use time-delayed payloads to crash applications and corrupt industrial control systems.
grunt-hasher
Advanced tools
This plugin requires Grunt ~0.4.2
If you haven't used Grunt before, be sure to check out the Getting Started guide, as it explains how to create a Gruntfile as well as install and use Grunt plugins. Once you're familiar with that process, you may install this plugin with this command:
npm install grunt-hasher
Once the plugin has been installed, it may be enabled inside your Gruntfile with this line of JavaScript:
grunt.loadNpmTasks('grunt-hasher');
In your project's Gruntfile, add a section named hasher to the data object passed into grunt.initConfig().
grunt.initConfig({
hasher: {
options: {
// Task-specific options go here.
},
your_target: {
// Target-specific file lists and/or options go here.
}
}
});
Type: String
Default value: "md5"
A string value that is the type of hashing algorithm to use. Must be either "sha1" or "md5".
Type: String
Default value: "text"
A string value that is the type of output data. Must be either "text" or "json".
Type: String
Default value: "hex"
A string value that is the type of output hash digits. Must be either "none" or "hex".
Type: String
Default value: grunt.file.defaultEncoding
The file encoding to read files with.
Type: Boolean or Number
Default: false
Whether to copy or set the existing file permissions. Set to true to copy the existing file permissions. Or set to the mode, i.e.: 0644, that copied files will be set to.
Type: String
Default value: "{HASH} *{SRC}"
...
Type: String
Default value: "{BASENAME}.{HASH}{EXT}"
...
Type: Number
Default value: null
The number of characters from the beginning of the hash value to use. When set to undefined or null, all characters are used.
Type: Function
Default value: internal function
...
FAQs
Create hashes for files
The npm package grunt-hasher receives a total of 3 weekly downloads. As such, grunt-hasher popularity was classified as not popular.
We found that grunt-hasher demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
Socket researchers discovered nine malicious NuGet packages that use time-delayed payloads to crash applications and corrupt industrial control systems.

Security News
Socket CTO Ahmad Nassri discusses why supply chain attacks now target developer machines and what AI means for the future of enterprise security.

Security News
Learn the essential steps every developer should take to stay secure on npm and reduce exposure to supply chain attacks.