
Research
Security News
Lazarus Strikes npm Again with New Wave of Malicious Packages
The Socket Research Team has discovered six new malicious npm packages linked to North Korea’s Lazarus Group, designed to steal credentials and deploy backdoors.
hello-rust-wasm
Advanced tools
create-wasm-app
An npm init
template for kick starting a project that uses NPM packages containing Rust-generated WebAssembly and bundles them with Webpack.
Built with 🦀🕸 by The Rust and WebAssembly Working Group
This template is designed for depending on NPM packages that contain Rust-generated WebAssembly and using them to create a Website.
wasm-pack-template
.rust-webpack-template
and/or
rust-parcel-template
.npm init wasm-app
.gitignore
: ignores node_modules
LICENSE-APACHE
and LICENSE-MIT
: most Rust projects are licensed this way, so these are included for youREADME.md
: the file you are reading now!index.html
: a bare bones html document that includes the webpack bundleindex.js
: example js file with a comment showing how to import and use a wasm pkgpackage.json
and package-lock.json
:
start
script to run webpack-dev-server
webpack.config.js
: configuration file for bundling your js with webpackLicensed under either of
at your option.
Unless you explicitly state otherwise, any contribution intentionally submitted for inclusion in the work by you, as defined in the Apache-2.0 license, shall be dual licensed as above, without any additional terms or conditions.
FAQs
create an app to consume rust-generated wasm packages
The npm package hello-rust-wasm receives a total of 0 weekly downloads. As such, hello-rust-wasm popularity was classified as not popular.
We found that hello-rust-wasm demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
The Socket Research Team has discovered six new malicious npm packages linked to North Korea’s Lazarus Group, designed to steal credentials and deploy backdoors.
Security News
Socket CEO Feross Aboukhadijeh discusses the open web, open source security, and how Socket tackles software supply chain attacks on The Pair Program podcast.
Security News
Opengrep continues building momentum with the alpha release of its Playground tool, demonstrating the project's rapid evolution just two months after its initial launch.