
Security News
/Research
Fake Corepack Site Distributes Infostealer and Proxyware to Developers
A fake corepack.org site is impersonating the Node.js tool and delivers an infostealer and proxyware to developers who download it.
naruse-parser
Advanced tools
This is a javascript interpreter for naruse code run in different platform
gzip后只有18kb,基于 TypeScript 编写的 JavaScript 解释器,运行于es的环境,支持完整的es5特性与大部分的es6特性,完整的错误提示系统,
编译器是基于acorn的0.12.0改造后的版本。
解释器是fork于jsjs。
test/bootstrapping.jsnpm i naruse-parser -S
import run from 'naruse-parser';
const exports = run(`
exports.name = 'naruse';
console.log(exports.name);
`);
// naruse
/**
* @parma code 传入的代码片段
* @parma injectObject 注入的全局变量
* @parma onError 全局错误收集中心
*/
declare const run: (code: string, injectObject: Record<string, any>, onError?: (e: Error) => void) => any;
相关特性可以看这里,并不一定全部实现。但常用的都会实现的。
polyfill/test/bootstrapping.jsMozilla Public License Version 2.0
FAQs
只有18kb的一个js编译器+js解释器
The npm package naruse-parser receives a total of 23 weekly downloads. As such, naruse-parser popularity was classified as not popular.
We found that naruse-parser demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
/Research
A fake corepack.org site is impersonating the Node.js tool and delivers an infostealer and proxyware to developers who download it.

Research
/Security News
A large-scale campaign abused GitHub Actions in compromised repositories to exploit CVE-2026-41940 in cPanel and WHM and steal server credentials.

Security News
Five frontier LLMs generated the same nonexistent package names, leaving 53 available for potential slopsquatting across PyPI and npm.