
Security News
/Research
Fake Corepack Site Distributes Infostealer and Proxyware to Developers
A fake corepack.org site is impersonating the Node.js tool and delivers an infostealer and proxyware to developers who download it.
这个是 OceanPress 的核心库,包含了前端应用和命令行程序。
将思源笔记本的内容转换为静态网站:
oceanpress build -c <配置文件路径> -o <输出目录>
选项:
-c, --config <string> - 指定配置文件的位置-o, --output <string> - 指定输出目录位置示例:
oceanpress build -c ./config.json -o ./dist
运行动态代理服务器用于开发和预览:
oceanpress server -c <配置文件路径>
选项:
-c, --config <string> - 指定配置文件的位置-h, --host <string> - web服务绑定到的地址(默认:127.0.0.1)-p, --port <number> - web服务绑定到的端口(默认:80)--cache <boolean> - 配置为 true 时开启缓存,默认为 false 不开启缓存示例:
# 使用默认端口
oceanpress server -c ./config.json
# 指定端口和主机
oceanpress server -c ./config.json -p 3000 -h 0.0.0.0
# 开启缓存
oceanpress server -c ./config.json --cache true
将生成的站点部署到远程服务器:
oceanpress deploy -c <配置文件路径> -h <API地址> -k <API密钥>
选项:
-c, --config <string> - 指定配置文件的位置-h, --apiBase <string> - OceanPress server 地址-k, --apiKey <string> - OceanPress server Api 密钥示例:
oceanpress deploy -c ./config.json -h https://api.example.com -k your-api-key
OceanPress 使用 JSON 格式的配置文件来定义站点的基本信息和构建参数。配置文件通常包含:
可以使用 claude 执行 /full-release 命令自动更新依赖并推送npm
FAQs
The npm package oceanpress receives a total of 2 weekly downloads. As such, oceanpress popularity was classified as not popular.
We found that oceanpress demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
/Research
A fake corepack.org site is impersonating the Node.js tool and delivers an infostealer and proxyware to developers who download it.

Research
/Security News
A large-scale campaign abused GitHub Actions in compromised repositories to exploit CVE-2026-41940 in cPanel and WHM and steal server credentials.

Security News
Five frontier LLMs generated the same nonexistent package names, leaving 53 available for potential slopsquatting across PyPI and npm.