
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
After every update of Kingdom Come Deliverance all mods would have to be updated. This program describes the mods as changes to the XML files and executes these changes. So if Kingdom Come ever updates, just run this program again and all mods are updated.
The plugins are small js files with the modifications to the XML files. This modder applies those modifications and creates the mods. When multiple plugins use the same file, this modder automatically puts all those plugins in the same mod.
npm install kcd-modder
const modKingdomCome = require('kcd-modder')
const gameDir = 'C:\\Program Files\\Steam\\SteamApps\\common\\KingdomComeDeliverance'
const plugins = [
modKingdomCome.plugins['more-hares'],
{
name: 'alternate-food-spoil',
files: [
{
file: 'Libs/Tables/item/food.xml',
pakFile: null,
modifyFile: async (doc, { findDeep, setAttr }) => {
const rows = findDeep(doc.documentElement, { name: 'row', attr: { decay_time_hours: '' } })
if (!rows.length) throw new Error(`[alternate-food-spoil][Libs/Tables/item/food.xml] Error: rows with attribute decay_time_hours not found`)
for (const row of rows) {
setAttr(row, 'decay_time_hours', '0')
}
}
}
]
}
]
modKingdomCome(gameDir, plugins).catch(error => console.error('KCD Modder Error', error))
This repository uses StandardJS for linting the .js files
FAQs
Kingdom Come Deliverance modder
We found that kcd-modder demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.