
Research
/Security News
9 Malicious NuGet Packages Deliver Time-Delayed Destructive Payloads
Socket researchers discovered nine malicious NuGet packages that use time-delayed payloads to crash applications and corrupt industrial control systems.
On-the-fly javascript contacatenator, minifier and dependency resolver for client-side JS
#Node JS Loader (client-side)
This is a web-service which will serve your JS files for you. It does a few spiffy things:
This allows you to accomplish the following objectives:
This app is written in node.js, but is really not for node.js. You can use it for any web project. It is for clinet-side javascript, not server-side.
#Installation
npm install js-loader@latest
#Synopsis
Run the server
jsloader /home/dmcquay/myproject/js
Request your files
<script type="text/javascript" src="http://js.mysite.com/?sources=a.js,b.js,c.js"></script>
And if the first line of c.js looks like this:
//require d.js
Then d.js will be included in the output.
You can also request minfied output
<script type="text/javascript" src="http://js.mysite.com/?sources=a.js,b.js,c.js&minify=1"></script>
And you can have multiple source directories
jsloader /home/dmcquay/myproject/js1 /home/dmcquay/myproject/js2
#Planned features
FAQs
On-the-fly javascript contacatenator, minifier and dependency resolver for client-side JS
The npm package js-loader receives a total of 398 weekly downloads. As such, js-loader popularity was classified as not popular.
We found that js-loader demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
Socket researchers discovered nine malicious NuGet packages that use time-delayed payloads to crash applications and corrupt industrial control systems.

Security News
Socket CTO Ahmad Nassri discusses why supply chain attacks now target developer machines and what AI means for the future of enterprise security.

Security News
Learn the essential steps every developer should take to stay secure on npm and reduce exposure to supply chain attacks.