
Research
2025 Report: Destructive Malware in Open Source Packages
Destructive malware is rising across open source registries, using delays and kill switches to wipe code, break builds, and disrupt CI/CD.
multi-stage-sourcemap
Advanced tools
This library provide re-mapping function for multi-level sourcemap.
npm install multi-stage-sourcemap
well-know basic sourcemap is no problem.

Multi-level SourceMap has a problem.
Source Map Revision 3 Proposal doens't provide the way of mapping Minified Code to Original Code in the following figure.

Example:
A.js -> B.js -> C.js
B.js.map -> C.js.map
We can't see from C.js to A.js.
multi-stage-sourcemap can mapping C.js to A.js

The easy but lossy way is to ignore the intermediate steps in the process for the purposes of debugging, the source location information from the translation is either ignored (the intermediate translation is considered the “Original Source”) or the source location information is carried through (the intermediate translation hidden). -- Source Map Revision 3 Proposal
multi-stage-sourcemap does that!
C.js -> ... -> A.js
Code:
var transfer = require("multi-stage-sourcemap").transfer;
var cToAMap = transfer({fromSourceMap: cMap, toSourceMap: bMap});
transferReturn the re-mapped rawSourceMap string.
The only argument is an object with the following properties:
fromSourceMap : Object - rawSourceMap or String - JSON.stringify(rawSourceMap)toSourceMap : Object - rawSourceMap or String - JSON.stringify(rawSourceMap)rawSourceMap is like below object.
var rawSourceMap = {
version: 3,
file: 'min.js',
names: ['bar', 'baz', 'n'],
sources: ['one.js', 'two.js'],
sourceRoot: 'http://exammuple.com/www/js/',
mappings: 'CAAC,IAAI,IAAM,SAAUA,GAClB,OAAOC,IAAID;CCDb,IAAI,IAAM,SAAUE,GAClB,OAAOA'
};
For details, please see mozilla/source-map.
etc...
AltJS is languages that compile to JS. (It's contain ES6 with Traceur. )
git checkout -b my-new-featuregit commit -am 'Add some feature'git push origin my-new-featureMIT
FAQs
multi-level sourcemap
The npm package multi-stage-sourcemap receives a total of 95,517 weekly downloads. As such, multi-stage-sourcemap popularity was classified as popular.
We found that multi-stage-sourcemap demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
Destructive malware is rising across open source registries, using delays and kill switches to wipe code, break builds, and disrupt CI/CD.

Security News
Socket CTO Ahmad Nassri shares practical AI coding techniques, tools, and team workflows, plus what still feels noisy and why shipping remains human-led.

Research
/Security News
A five-month operation turned 27 npm packages into durable hosting for browser-run lures that mimic document-sharing portals and Microsoft sign-in, targeting 25 organizations across manufacturing, industrial automation, plastics, and healthcare for credential theft.