
Research
Two Malicious Rust Crates Impersonate Popular Logger to Steal Wallet Keys
Socket uncovers malicious Rust crates impersonating fast_log to steal Solana and Ethereum wallet keys from source code.
Neutrino is a configuration management tool for the webpack ecosystem that supports building, testing, linting, and developing JavaScript projects based on shared configuration presets and middleware. You can use Neutrino within your project alongside webpack, ESLint, Jest, Karma, and more of your favorite CLI tools. It intends to make the process of initializing and building projects much simpler by providing minimal development dependencies and tightening the integration between tools.
Neutrino supports webpack for building both web and Node.js projects by providing complete build presets which can be shared across targets and projects. You can use Neutrino base presets to get started building a variety of projects, and you can create your own presets by extending the Neutrino core ones to be shared across your own projects or even by the community. Presets can even be manipulated on a project-by-project basis to handle almost any build situation your preset doesn't cover.
See the Neutrino docs for details on installation, getting started, usage, and customizing.
#1652
#1614
#1651
#1638
#1644
#1640
#1612
#1625
#1592
#1626
#1632
#1631
#1629
#1620
#1613
#1618
#1619
#1615
#1650
FAQs
Create and build JS applications with managed configurations
We found that neutrino demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 4 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Socket uncovers malicious Rust crates impersonating fast_log to steal Solana and Ethereum wallet keys from source code.
Research
A malicious package uses a QR code as steganography in an innovative technique.
Research
/Security News
Socket identified 80 fake candidates targeting engineering roles, including suspected North Korean operators, exposing the new reality of hiring as a security function.