
Research
/Security News
Contagious Interview Campaign Escalates With 67 Malicious npm Packages and New Malware Loader
North Korean threat actors deploy 67 malicious npm packages using the newly discovered XORIndex malware loader.
Watches (current) directory **/*.js files and re-generates main.js, responsible for loading whole client-side application
<script src="">
tags during development###Ignored files Directories starting with dot are ignored, this makes it perfect place for your bower dependencies. Use .bowerrc to override bower components directory.
###Order of loading Files as loaded alphabetically, with each directory treated as module, dependent on its children. This can be better understood with following example:
/test-app/
/!deps/
jquery.js
jquery.plugin.js
/common/
BaseModel.js
/eshop/
/products/
Product.js
Cart.js
/users/
User.js
app.js
Where app.js will be loaded last, Product will be loaded before Cart but after ActiveRecord, because it is in folder above. Jquery will be loaded first in this example.
Resulting order:
###Options It is possible to override both filename, directory and/or glob-pattern, however it is discouraged to do so except for timestamped dist files.
###Install
npm install -g main-js
###Usage
Usage: main-js [options]
Watches (current) directory **/*.js files and re-generates main.js
Options:
-h, --help output usage information
-V, --version output the version number
--target [file] target file name (main.js)
--directory [dir] dir to scan for js files (.)
--pattern [glob-pattern] custom js-file pattern (**/*.js)
--build minify sources to target file, do not watch
Development - watch for file changes:
cd my-web-app
main-js
Build - generate "big" dist file:
cd my-web-app
main-js --build
NOTE: Do not commit generated files to SCM, use --build flag during build instead
FAQs
Watches (current) directory **/*.js files and re-generates main.js
The npm package main-js receives a total of 56 weekly downloads. As such, main-js popularity was classified as not popular.
We found that main-js demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
/Security News
North Korean threat actors deploy 67 malicious npm packages using the newly discovered XORIndex malware loader.
Security News
Meet Socket at Black Hat & DEF CON 2025 for 1:1s, insider security talks at Allegiant Stadium, and a private dinner with top minds in software supply chain security.
Security News
CAI is a new open source AI framework that automates penetration testing tasks like scanning and exploitation up to 3,600× faster than humans.