
Research
Malicious npm Packages Impersonate Flashbots SDKs, Targeting Ethereum Wallet Credentials
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
mxd-environment
Advanced tools
Includes all NPM packages for an app in a maxdome node environment
DEPRECATED: Use maxdome-node
For starting a new project or see the mxd-environment
in action a template is available:
https://github.com/maxdome/mxd-environment-template
app.js
(with babel and destructioning):const { app, checkhelper, config, express, healthcheck, info, logging, silentLogging }
= require('mxd-environment')();
// example route
app.get('/', (req, res) => {
res.send('Hello World!');
});
app.js
(without babel):const environment = require('mxd-environment')();
const app = environment.app;
// example route
app.get('/', (req, res) => {
res.send('Hello World!');
});
package.json
:{
"scripts": {
"start": "mxd-start",
"status" : "mxd-status",
"stop" : "mxd-stop"
},
"dependencies: {
"mxd-starter": "^2.1.0"
}
}
mxd-environment
will automatically setting up the package if its installed.
package.json
:{
"dependencies: {
"mxd-swagger": "^1.0.5"
}
}
mxd-starter
is now an optional dependency. It must be defined as project dependency if its in usemxd-swagger
is now automatically setting up if its installedmxd-config
handles also the all.json
and development.json
. The code to require them can be removed. Also the
config
param to initialize mxd-environment
must be removed. The config
is available via environment.config
app
is now initialized (includes also the .listen()
) by the library, use it via environment.app
,
the express library is available via environment.express
app
param is removed from environment.info()
and environment.healthcheck()
environment.healthcheck.checkhelper
is now environment.checkhelper
Documentation contains all subpackages and the additional mxd-swagger
.
All configurations can be overwritten in the config/properties.json
.
There are different attributes offered by the different subpackages of the mxd-environment
and different depending on
the application itself.
Important: If an attribute is overwritten, the complete tree of the attribut must be defined!
mxd-express
:{
"port": 80,
"hostname": undefined
}
mxd-logging
(mandatory for logging into file):{
"logging": {
"transports": [
{
"type": "File",
"options": {
"filename": "/path/to/the/logfile.log",
"level": "info"
}
}
]
}
}
mxd-starter
: A bit special and descriped separatly https://github.com/maxdome/mxd-startermxd-express
: /ping
(all HTTP verbs are allowed) response a 200 if the app is running and shouldn't be restricted
mxd-healthcheck
, mxd-info
, mxd-swagger
: All routes starting with /docs
, /health
, /info
and the route
/api-docs
should be available in the office network or restricted by basic auth
FAQs
Includes all NPM packages for an app in a maxdome node environment
The npm package mxd-environment receives a total of 0 weekly downloads. As such, mxd-environment popularity was classified as not popular.
We found that mxd-environment demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 15 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
Security News
Ruby maintainers from Bundler and rbenv teams are building rv to bring Python uv's speed and unified tooling approach to Ruby development.
Security News
Following last week’s supply chain attack, Nx published findings on the GitHub Actions exploit and moved npm publishing to Trusted Publishers.