Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
If you ask a experienced developer what he's thinking about content management systems, he'll probably tell you that he doesn't like them since they're bloated, overkill and slow as fuck. Muffin would like to change that.
Of course it doesn't yet have those cool features which all the other cool kids on the block are showing off, but it's very ambitious and always has an open ear for feedback from all angles!
To be able to use muffin, you'll need the latest version of those things. So please make sure they're updated before trying out this application. After installing node.js, please also make sure to fix your npm permissions.
Please firstly make sure that your database is available. On your local machine, the easiest way to start MongoDB is by running the following command:
mongod
After that, simply use our neat CLI (which you've already installed previously) to generate a new boilerplate within the specified directory:
muffin new <destination-path>
You'll then be asked to enter a few details about your site and the database connection. After you've answered all questions, your new site will be prepared. As soon as the setup is finished, use the following command to run muffin:
npm start
That's all! :loudspeaker: :turtle:
To help us with development, please read this.
FAQs
The 21st century way of building websites
The npm package muffin receives a total of 6 weekly downloads. As such, muffin popularity was classified as not popular.
We found that muffin demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.