Security News
Research
Data Theft Repackaged: A Case Study in Malicious Wrapper Packages on npm
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
ln-config-channels
Advanced tools
The list of channels and keywords used by LevelNews.org to organize the site.
The list of channels used by LevelNews.org to organize the website. Each channel is a topic. The channel list is in JSON format. Take a look at the data.js
file if you're just looking to see what channels are configured.
This module also contains keywords related to each channel. If you are a publisher or writer and your web domain and twitter handle are already listed in our news feed directory, take a look at the keywords
directory in this module to give you an idea of how to get our bots to pick up your story automagically (similar to SEO). Each channel/topic has a corresponding file inside of the keywords
directory that tells you what the magic words are to include in your article's title, url, and description and keywords meta tags. Level News is not exclusively limiting itself to these keywords, but you can use the ones included here as a general guide.
If you'd like to make a suggestion, please click the "Issues" tab in the GitHub repository. Or if you feel like writing some JSON and opening a GitHub pull request, feel free to do so. You can also email vision (@) levelnews.org.
npm install ln-config-channels --save
const configChannels = ('ln-config-channels')
// { 'ActionAlerts': { 'topic': '...'}, 'Activism': .... }
configChannels.data
// same as .data, w/ addt'l `keywords` array as property of each channel key
configChannels.dataWithKeywords
// returns array of channel names (only)
configChannels.filters.extractKeys()
// returns array of keywords related to channel name passed in
// if bad channel name is passed in it will return an empty array
configChannels.filters.extractKeywords(channelName)
FAQs
The list of channels and keywords used by LevelNews.org to organize the site.
The npm package ln-config-channels receives a total of 0 weekly downloads. As such, ln-config-channels popularity was classified as not popular.
We found that ln-config-channels demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Research
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
Research
Security News
Attackers used a malicious npm package typosquatting a popular ESLint plugin to steal sensitive data, execute commands, and exploit developer systems.
Security News
The Ultralytics' PyPI Package was compromised four times in one weekend through GitHub Actions cache poisoning and failure to rotate previously compromised API tokens.