
Research
Two Malicious Rust Crates Impersonate Popular Logger to Steal Wallet Keys
Socket uncovers malicious Rust crates impersonating fast_log to steal Solana and Ethereum wallet keys from source code.
mdconf-loader
Advanced tools
This loader automatically converts markdown into json using formatted with the mdconf parser.
Install with yarn:
yarn add -D mdconf-loader
Install with npm:
npm install --save-dev mdconf-loader
Add the mdconf-loader to your webpack configuration:
const config = {
module: {
rules: [
{
test: /\.(md|mdconf)$/,
loader: 'mdconf-loader'
}
]
}
The loader will translate markdown files into JSON.
Markdown headings act as keys, list items with :
act as maps,
otherwise regular lists behave as.. lists.
# Defaults
Since this is markdown you can still have regular text
to explain what the hell is going on.
## Upload
- max: 200mb
- dir: /tmp
### Thumbnail sizes
- 50x50
- 300x300
- 600x600
- 900x900
## S3
- api key: 111111
- secret: 222222
### Buckets
- avatars: myapp-avatars
- assets: myapp-assets
- files: myapp-files
# Production
## Upload
- max: 1gb
- dir: /data/uploads
## Sites
| hostname | build | coverage |
| :----------- | :------:| --------: |
| google.com | passing | 94% |
| facebook.com | passing | 97% |
| twitter.com | failed | 81% |
| myspace.com | unkown | 0% |
output json:
{
"defaults": {
"upload": {
"max": "200mb",
"dir": "/tmp",
"thumbnail sizes": [
"50x50",
"300x300",
"600x600",
"900x900"
]
},
"s3": {
"api key": "111111",
"secret": "222222",
"buckets": {
"avatars": "myapp-avatars",
"assets": "myapp-assets",
"files": "myapp-files"
}
}
},
"production": {
"upload": {
"max": "1gb",
"dir": "/data/uploads"
},
"sites": [
{
"hostname": "google.com",
"build": "passing",
"coverage": "94%"
},
{
"hostname": "facebook.com",
"build": "passing",
"coverage": "97%"
},
{
"hostname": "twitter.com",
"build": "failed",
"coverage": "81%"
},
{
"hostname": "myspace.com",
"build": "unkown",
"coverage": "0%"
}
]
}
}
mdconf: TJ Holowaychuk
FAQs
mdconf (Markdown Configuration) loader for Webpack
The npm package mdconf-loader receives a total of 4 weekly downloads. As such, mdconf-loader popularity was classified as not popular.
We found that mdconf-loader demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Socket uncovers malicious Rust crates impersonating fast_log to steal Solana and Ethereum wallet keys from source code.
Research
A malicious package uses a QR code as steganography in an innovative technique.
Research
/Security News
Socket identified 80 fake candidates targeting engineering roles, including suspected North Korean operators, exposing the new reality of hiring as a security function.