
Research
/Security News
Miasma Mini Shai-Hulud Hits ImmobiliareLabs npm Packages
Miasma Mini Shai-Hulud hits @immobiliarelabs Backstage plugins, targeting GitLab and LDAP auth packages on npm.
NCMP is a simple tool which allows you to perform some postprocessing after npm installs or updates. It is mainly designed for usage in client infrastructures. So if you use npm as your main client package manager.
npm install ncmp
The core feature is to copy files which are runtime dependencies of your client application to another folder structure outside of node_modules automatically.
You have to create a ncmp.json configuration file in the root folder of your project:
{
"destinations": {
"*": "scripts/components",
"css": "content/components"
},
"packages": {
"jquery": ["dist/jquery.js", "dist/jquery.min.js"]
},
"plugins": []
}
It defines the destination folders depending on the file extension. The base path is the root folder. In this example we want to copy the distributions from jquery. The tool will perform the following copy actions:
The folder with the name of the package stays present.
You can use globs everywhere in the source file paths:
dist/*.js
dist/jquery.*
dist/*.min.js
In the "plugins" array you can define a set of plugins which can do more specific postprocessing.
MIT
FAQs
NPM client modules postprocessor
The npm package ncmp receives a total of 0 weekly downloads. As such, ncmp popularity was classified as not popular.
We found that ncmp demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
Miasma Mini Shai-Hulud hits @immobiliarelabs Backstage plugins, targeting GitLab and LDAP auth packages on npm.

Security News
Rolldown paused Rust React Compiler integration after a 5MB binary size increase raised concerns about shipping React-specific code to all Vite users.

Security News
/Research
Mini Shai-Hulud expands into the Go ecosystem after hitting LeoPlatform npm packages and targeting GitHub Actions workflows.