
Research
/Security News
Toptal’s GitHub Organization Hijacked: 10 Malicious Packages Published
Threat actors hijacked Toptal’s GitHub org, publishing npm packages with malicious payloads that steal tokens and attempt to wipe victim systems.
The library makes three assumptions:
You can use labelgun in your project via npm such as:
npm install labelgun --save
Or if you're using yarn
:
yarn add labelgun
You can also use a auto-generated CDN thanks to unpkg :
https://unpkg.com/labelgun@6.0.0/lib/labelgun.js
Check out the docs and demos live here
A nice interactive way to play with the demos locally is to use a hot reloading web server such as live-server:
npm install -g live-server
live-server
We can install all the required dependencies using node and npm:
npm install
Labelgun is transpiled from ES6 using babel presets for Webpack 2. You can build the source using:
npm run build
or:
npm run build-prod
For the minified version. You can also watch the file with:
npm run watch
Labelgun uses Jasmine for testing. You can do an npm install and then use:
npm run test
at the command line. Tests are found in the spec
folder. We can also run test coverage as so:
npm run coverage
GitHub pages documentation deployment:
npm deploy-doc
NPM updating:
npm publish
Using Labelgun? Open a pull request and let us know!
Labelgun as an open source project was made possible thanks to Podaris.
MIT
FAQs
A mapping library agnostic labelling engine
The npm package labelgun receives a total of 565 weekly downloads. As such, labelgun popularity was classified as not popular.
We found that labelgun demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
/Security News
Threat actors hijacked Toptal’s GitHub org, publishing npm packages with malicious payloads that steal tokens and attempt to wipe victim systems.
Research
/Security News
Socket researchers investigate 4 malicious npm and PyPI packages with 56,000+ downloads that install surveillance malware.
Security News
The ongoing npm phishing campaign escalates as attackers hijack the popular 'is' package, embedding malware in multiple versions.