
Security News
/Research
Wallet-Draining npm Package Impersonates Nodemailer to Hijack Crypto Transactions
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
Small command line utility for build-time processing of handlebars templates
hbsutil
is a command line wrapper around handlebars
Usage: hbsutil [options] <template ...>
Small command line utility for build-time processing of handlebars templates
Options:
-h, --help output usage information
-V, --version output the version number
-f, --file <json_file> Input file to read the data from. Can be specified multiple times, and files will be merged together in the order they appear on the command line, with later files overwriting duplicate fields of earlier files.
-e, --env [fieldName] Add environment variables under the given fieldName. Defaults to 'env' if no fieldName given
-o, --opt <nameValuePair> Add an extra value to the @root object, as a string. Specify as "name=value"
-d, --dir <directory> Directory to write the output file to. By default, will write to same directory as the input template
-s, --strip [suffix] If an input template file ends in the given suffix, the output file will have that suffix stripped off. For example, a suffix of 'hbs' would turn file.html.hbs into 'file.html'. Multiple entries can be specified, separated by commas. If this parameter is specified with no argument, will default to stripping off '.hbs'
--force Normally if we calculate that an output file will overwrite the input file that generated it, we refuse to continue processing since this is almost certainly not what the user meant. Passing --force overrides this.
-v, --verbose Print extra information about what we're doing
-q, --quiet Only print errors. -v will override this if both are specified
GNU GPL-3 - see LICENSE.md file for details.
Patrick Lavigne (https://github.com/PMLavigne)
FAQs
Small command line utility for build-time processing of handlebars templates
The npm package hbsutil receives a total of 0 weekly downloads. As such, hbsutil popularity was classified as not popular.
We found that hbsutil demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
/Research
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
Security News
This episode explores the hard problem of reachability analysis, from static analysis limits to handling dynamic languages and massive dependency trees.
Security News
/Research
Malicious Nx npm versions stole secrets and wallet info using AI CLI tools; Socket’s AI scanner detected the supply chain attack and flagged the malware.