
Research
Malicious npm Packages Impersonate Flashbots SDKs, Targeting Ethereum Wallet Credentials
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
md-cms is a markdown based CMS, which can be embedded in express as a route.
You may install md-cms from npm registry.
npm install md-cms
Please check out demo folder in the repository for details.
var MdCms = require('md-cms');
var cms = new MdCms({
root: path.join(__dirname, 'content')
});
app.get('/', function(req, res, next) {
cms.getPageList(function(err, list) {
if (err)
return next(err);
res.render('blog-list', {
list: list
});
});
});
app.use('/', function(req, res, next) {
cms.getPage(req.path, function(err, page, html) {
if (err || !page)
return next(err);
res.render('blog-page', {
page: page,
html: html
});
});
});
md-cms supports plug-in to make markdown even more powerful.
plug-in uses markdown code block syntax, you may specify language as
cms.[plugin-name]
and the content in the code block will be forwarded to the corresponding plug-in handler.
```cms.[plug-in name]
[plug-in configuration]
``
```cms.page
{
"ctime": 1393427527217,
"author": "ashi009"
}
``
Which will set meta of the page. In the above case, it includes create time and author.
This info could be accessed via page.info
in cms.getPage
callback.
Creating a new plug-in is fairly simple, just create a js file in plugins folder, and Md-cms will automatically loaded it. Note that filename will be used as plug-in name, and exports a function as plug-in handler.
You may also add a plug-in handler to MdCms.plugins
at runtime, the property name will be used as plug-in name, and the value
should be the handler.
function(code, page, callback) {
try {
page.info = JSON.parse(code);
callback(null, '');
} catch (e) {
callback(e);
}
};
The handler will take 3 parameters:
code
is the plug-in configuration, do whatever you want with thatpage
is a reference to page
callback(err, html)
html is the final output.FAQs
Markdown based CMS
The npm package md-cms receives a total of 0 weekly downloads. As such, md-cms popularity was classified as not popular.
We found that md-cms demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
Security News
Ruby maintainers from Bundler and rbenv teams are building rv to bring Python uv's speed and unified tooling approach to Ruby development.
Security News
Following last week’s supply chain attack, Nx published findings on the GitHub Actions exploit and moved npm publishing to Trusted Publishers.