
Research
Malicious npm Packages Impersonate Flashbots SDKs, Targeting Ethereum Wallet Credentials
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
office-addin-dev-certs
Advanced tools
This package can be used to manage certificates for development server using https://localhost.
npm install office-addin-dev-certs
Upon installation a development CA certicate and localhost key and
certificate will be generated inside <userhome>/.office-addin-dev-certs
.
The certificate is valid for 30 days by default.
Creates an SSL certificate for "localhost" signed by a developer CA certificate and installs the developer CA certificate so that the certificates are trusted. If the certificates were installed but are no longer valid, they will be replaced with valid certificates.
Syntax:
office-addin-dev-certs install [options]
Options:
--machine
Install the CA certificate for all users. You must be an Administrator.
--days <days>
Specifies the number of days until the CA certificate expires. Default: 30 days.
Verify the certificate.
Syntax:
office-addin-dev-certs verify
Uninstall the certificate.
Syntax:
office-addin-dev-certs uninstall [options]
Options:
--machine
Uninstall the CA certificate for all users. You must be an Administrator.
var https = require('https')
var devCerts = require("office-addin-dev-certs");
var options = await devCerts.getHttpsServerOptions();
var server = https.createServer(options, function (req, res) {
res.end('This is servered over HTTPS')
})
server.listen(443, function () {
console.log('The server is running on https://localhost:443')
})
FAQs
For managing certificates when developing Office Add-ins.
The npm package office-addin-dev-certs receives a total of 101,236 weekly downloads. As such, office-addin-dev-certs popularity was classified as popular.
We found that office-addin-dev-certs demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
Security News
Ruby maintainers from Bundler and rbenv teams are building rv to bring Python uv's speed and unified tooling approach to Ruby development.
Security News
Following last week’s supply chain attack, Nx published findings on the GitHub Actions exploit and moved npm publishing to Trusted Publishers.