
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
Inline C++ with Node.js
npm install --save inline-cpp
or
npm install -g inline-cpp
Was tested on Linux and Windows. MacOS should also work.
// test.js
const compile = require('inline-cpp');
const hello = compile `
String func(const CallbackInfo& info) {
return String::New(info.Env(), "Hello world from C++!");
}
`
console.log(hello())
Now run it:
➜ node test.js
Hello world from C++!
The first time you run the script, it takes longer time to execute.
For each inline block of code, a native module will be generated, compiled with node-gyp and loaded dynamically.
The next time you run the script, it will reuse previous build results (unless you change the inline C++ code). The build results are cached.
For more C++ code examples, see node-addon-api
inline-cpp supports several invocation methods.
Pass some code as string to build it with default options.
const InlineCPP = require('inline-cpp');
InlineCPP('code')
You can also pass code using tagged template syntax.
InlineCPP `code`
Pass an object to create a new compiler with custom options.
Options will get passed to node-gyp target.
const customCompiler = InlineCPP({ ... })
This is just a prototype. I created this to check the general concept.
You're welcome to contribute! Here are some ideas:
node node-gyp.jsYou can enable debug output by setting env. variable: DEBUG=inline-cpp
FAQs
Use inline C++ in your JS
The npm package inline-cpp receives a total of 3 weekly downloads. As such, inline-cpp popularity was classified as not popular.
We found that inline-cpp demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.