Research
Security News
Quasar RAT Disguised as an npm Package for Detecting Vulnerabilities in Ethereum Smart Contracts
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
machinepack
Advanced tools
Command-line tool for working with machinepacks and machines.
$ npm install -g machinepack
Note that you'll also want to grab the Yeoman generator
You should check out http://node-machine.org/implementing for an in-depth tutorial, but here are a few highlights:
# open generated manpage on node-machine.org in your browser of choice
mp browse
# run a machine
# (theres an interactive prompt- you'll get to choose from a list, then be prompted to provide values for required inputs)
# (supports json entry and validation, re-running using command-line flags, and protects inputs marked as "protected" so they don't show up in your bash history)
mp exec
# clean everything up: (re)scaffold JSON test files, (re)generate readme using latest metadata, make sure repo url is in package.json, etc.
mp scrub
# list machines (useful for remembering wtf you're doing)
mp ls
# add new machine w/ identity="do-some-stuff" and start interactive prompt to get the rest of the necessary info
mp add do-some-stuff
# copy machine (useful for quickly creating similar machines)
mp cp foo bar
# rename machine (useful for fixing misspellings)
mp mv initiate-denk-party initiate-dance-party
This CLI tool is just sugar on top of the machine specification. That said, it helps a lot, and if you're building a pack, I highly recommend checking it out.
MIT © 2015 Mike McNeil
FAQs
CLI tool for working with machinepacks and their machines.
The npm package machinepack receives a total of 5 weekly downloads. As such, machinepack popularity was classified as not popular.
We found that machinepack demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 5 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
Security News
Research
A supply chain attack on Rspack's npm packages injected cryptomining malware, potentially impacting thousands of developers.
Research
Security News
Socket researchers discovered a malware campaign on npm delivering the Skuld infostealer via typosquatted packages, exposing sensitive data.