
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
nc-setup is a tool that will install all the main software needed for the JavaScript, Data Engineering and Java programmes.
nc-setup does...nc-setup?Prior to joining a bootcamp students will be asked to set up their development environment om their machines. To do this we ask them to use the nc-setup npm package.
At a high level, nc-setup will install the required software for our courses. It will also add certain pieces of configuration to the appropriate shell configuration file (.bashrc/.zshrc).
The script accepts one argument - the course to run the setup for. It can accept:
js (JavaScript) or sd (Software Development - being deprecated)de (Data Engineering)jv (Java)The first thing the nc-setup script does is figure out what operating system the student is running. It will then run the appropriate setup for the course and operating system. For example if a student runs npx nc-setup sd on an Ubuntu OS then it will run the Linux Software Development with JavaScript setup script.
The installation process for each course is divided up into separate steps. For example the setup for JavaScript students running nc-setup on Linux the steps are as follows:
The output of each of these steps will have it's own heading like this:
##### LINUX PACKAGE UPDATE #####
output from running the package update command...
Underneath the output for final installation step you will see a summary that will confirm the success or failure of each step. It will look something like this:
Linux Package Updates ... success
Git ... success
Postgres ... success
Configure Postgres ... success
Unfortunately errors will sometimes still occur. You may see failure messages in the final summary like this:

If so you can find more information by scrolling up the terminal output and looking under the relevant heading.

We direct students to execute the nc-setup package with npx. To do so we ask them to first install nvm and a recent version of node, this will give them access to the npx command. Once they've done that they can execute the installation script and it should take care of the rest. Students are directed to ask for help in their precourse channels if there are errors that occur while running the script.
The recommend usage is to execute the nc-setup package with npx. To do this students will first need to install a recent version of node. It is recommended to use Node Version Manager (nvm) to install the most recent version of node.
The following command will install nvm and then use it to install node:
curl -o- https://raw.githubusercontent.com/nvm-sh/nvm/v0.40.1/install.sh | bash && source ~/.nvm/nvm.sh && nvm install node && nvm use node
Linux users may first need to install curl, if they already have curl then this step is not necessary
curl can be installed with the following command:
sudo apt-get install curl
Once they have node installed they will have access to the npx command and can run the appropriate installation script as appropriate:
JavaScript students: npx nc-setup js
Data Engineering students: npx nc-setup de
Java students: npx nc-setup jv
The setup depends on the course and the OS.
.bashrc file!unzip command if needed).zshrc file!.zshrc file!psql to the PATH by adding a line to the .zshrc file.zsh to start a new shell.zshrc file!zsh to start a new shellTroubleshooting guidance is separated by course and can be found here.
Contributing guidelines can be found here
FAQs
Installation package for NC courses
The npm package nc-setup receives a total of 1 weekly downloads. As such, nc-setup popularity was classified as not popular.
We found that nc-setup demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.