Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
nodebb-plugin-headtag
Advanced tools
A starter kit for quickly creating NodeBB plugins. Comes with a pre-setup LESS file, server side JS script with an action:app.load
hook, and a client-side script. Most plugins need at least one of the above, so this ought to save you some time. For a full list of hooks have a look at our wiki page, and for more information about creating plugins please visit our documentation portal.
Fork this or copy it, and using your favourite text editor find and replace all instances of nodebb-plugin-quickstart
with nodebb-plugin-your-plugins-name
. Change the author's name in the LICENSE and package.json files.
Once you're done don't forget to publish it on NPM, and make a thread about it here.
Really simple, just edit static/lib/main.js
and paste in console.log('hello world');
, and that's it!
npm install nodebb-plugin-quickstart
Don't forget to add screenshots!
FAQs
A starter kit for quickly creating NodeBB plugins
The npm package nodebb-plugin-headtag receives a total of 1 weekly downloads. As such, nodebb-plugin-headtag popularity was classified as not popular.
We found that nodebb-plugin-headtag demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.