
Research
NPM targeted by malware campaign mimicking familiar library names
Socket uncovered npm malware campaign mimicking popular Node.js libraries and packages from other ecosystems; packages steal data and execute remote code.
miniapp-appx-web-cli
Advanced tools
cli for appx-web(af-appx)
这个库废弃,请使用 IDE 构建发布
bind host
my.local.alipay.net 127.0.0.1
install debuggable Alipay.app(compile NebulaSDK from source).
NebulaSDK 调试逻辑写在了 #if debug 中,所以要从 NebulaSDK 源码编译
install alilang cert
hpm sim i crt
npm start
npm run test-start
tnpm i @ali/yarn yarn -g
yarn config set prefix $(npm config get prefix)
ayarn global add @alipay/appx-web-cli
upgrade:
ayarn global remove @alipay/appx-web-cli
ayarn global add @alipay/appx-web-cli
appx-web-cli start
then
appx-web-cli run-ios
// 钉钉的启动方式
appx-web-cli run-ios --app=dd
appx-web-cli run-android --app=dd
booted
appx-web-cli bundle --minify --out=./out
在项目目录执行
appx-web-cli run-ios
在项目目录执行获取真机调试二维码
appx-web-cli qrcode
appx-web-cli doctor
check your env and dependencies version.
module.exports = function (config) {
Object.assign(config.transformConfig, {
runtimeConfig: {
navigationStackLimits: 10, // 导航栈大小
},
});
};
app.json 的 window 需要写明是小程序模式:
{
"window":{
"enableWK": "YES",
"enableDSL": true
}
}
npm test
check out tests/out dir
FAQs
cli for appx-web(af-appx)
The npm package miniapp-appx-web-cli receives a total of 3 weekly downloads. As such, miniapp-appx-web-cli popularity was classified as not popular.
We found that miniapp-appx-web-cli demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Socket uncovered npm malware campaign mimicking popular Node.js libraries and packages from other ecosystems; packages steal data and execute remote code.
Research
Socket's research uncovers three dangerous Go modules that contain obfuscated disk-wiping malware, threatening complete data loss.
Research
Socket uncovers malicious packages on PyPI using Gmail's SMTP protocol for command and control (C2) to exfiltrate data and execute commands.