Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
grunt-mobify-cloud
Advanced tools
Push builds to the Mobify Cloud
'mobify-upload': {
options: {
projectSlug: 'mobify-test',
settingsFile: './.local-settings'
},
src: ['bld/**', '!bld/test/test-credentials']
}
Refer to grunt's globbing patterns to specify file paths (http://gruntjs.com/api/grunt.file#globbing-patterns)
type: string
You can optionally specify the origin of the endpoint where you want to upload your build. It defaults to cloud.mobify.com
options: {
origin: 'https://cloud-test.mobify.com'
}
type: string
You probably want to send up some sort of descriptive message with your build. When you run the grunt task you can specify your message like this:
grunt mobify-upload --message="An informative and witty build message."
save your email and mobify api_key for future use
This will store your email and api key in a file which can be accessed when you upload your builds to the mobify cloud. You can specify the location of the file in your Gruntfile like so:
'mobify-save_credentials': {
src: '/Users/myself/.mobify'
}
Then to save your credentials run this command with your credentials:
grunt mobify-save_credentials --user="user@mobify.com" --key="5up3rR4Nd0mK3y"
Verifies your
package.json
andbower.json
files against the Mobify Cloud.
grunt mobify-verify_adaptive_dependencies
To deploy this plugin you need to specify some environment variables that specify your github username and password.
export GITHUB_USERNAME='foobarnerson'
export GITHUB_PASSWORD='myaccesstoken'
FAQs
Grunt plugins used by Adaptive.js projects to interact Mobify's Preview and Release Console
The npm package grunt-mobify-cloud receives a total of 1 weekly downloads. As such, grunt-mobify-cloud popularity was classified as not popular.
We found that grunt-mobify-cloud demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 6 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.