
Security News
/Research
Fake Corepack Site Distributes Infostealer and Proxyware to Developers
A fake corepack.org site is impersonating the Node.js tool and delivers an infostealer and proxyware to developers who download it.
iov-smart-utils
Advanced tools
垂类小程序通用基础能力库
├── dist // 编译压缩产出-用于发包 ├── mochawesome-report // 单测报告 ├── node_modules // 项目依赖 ├── script // 开发相关脚本 ├── add // 新增模板脚本 ├── test // 单测脚本 ├── publish // 发布 npm 脚本 ├── src // 开发目录 ├── swan-lib // 依赖 swanApi 的函数存放目录 ├── basic-lib // 普通函数存放目录 ├── index.js // 导出 (此文件 npm run add 时自动生成,开发者无需关心) ├── test // 单测开发目录 ├── swan-lib // 依赖 swan API 的函数单测存放目录 ├── basic-lib // 普通函数单测存放目录 ├── index.js // 单测导入函数入口(此文件 npm run add 时自动生成,开发者无需关心) ├── test-demo // 开发以及单测辅助小程序项目 ├── pages // 开发函数时,用于调试的页面 ├── test // 依赖 swanApi 的函数单测辅助页面 ├── app.json // 辅助小程序配置文件 ├── fnlist // 目前已支持的函数列表(切勿手动修改,npm run add 自动生成) ├── .eslintrc.js // eslint 规则配置文件 ├── .gitignore // git 豁免配置文件 ├── .npmignore // npm 发包豁免配置文件 ├── .stylelintrc.js // stylelint 配置文件 ├── gulpfile.js // 编译脚本 ├── plopfile.js // plop脚本,新增相关 └── README.md // 项目说明
FAQs
The npm package iov-smart-utils receives a total of 11 weekly downloads. As such, iov-smart-utils popularity was classified as not popular.
We found that iov-smart-utils demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
/Research
A fake corepack.org site is impersonating the Node.js tool and delivers an infostealer and proxyware to developers who download it.

Research
/Security News
A large-scale campaign abused GitHub Actions in compromised repositories to exploit CVE-2026-41940 in cPanel and WHM and steal server credentials.

Security News
Five frontier LLMs generated the same nonexistent package names, leaving 53 available for potential slopsquatting across PyPI and npm.