
Research
/Security News
9 Malicious NuGet Packages Deliver Time-Delayed Destructive Payloads
Socket researchers discovered nine malicious NuGet packages that use time-delayed payloads to crash applications and corrupt industrial control systems.
office-addin-dev-certs
Advanced tools
This package can be used to manage certificates for development server using https://localhost.
npm install office-addin-dev-certs
Upon installation a development CA certicate and localhost key and
certificate will be generated inside <userhome>/.office-addin-dev-certs.
The certificate is valid for 30 days by default.
Creates an SSL certificate for "localhost" signed by a developer CA certificate and installs the developer CA certificate so that the certificates are trusted. If the certificates were installed but are no longer valid, they will be replaced with valid certificates.
Syntax:
office-addin-dev-certs install [options]
Options:
--machine
Install the CA certificate for all users. You must be an Administrator.
--days <days>
Specifies the number of days until the CA certificate expires. Default: 30 days.
Verify the certificate.
Syntax:
office-addin-dev-certs verify
Uninstall the certificate.
Syntax:
office-addin-dev-certs uninstall [options]
Options:
--machine
Uninstall the CA certificate for all users. You must be an Administrator.
var https = require('https')
var devCerts = require("office-addin-dev-certs");
var options = await devCerts.getHttpsServerOptions();
var server = https.createServer(options, function (req, res) {
res.end('This is servered over HTTPS')
})
server.listen(443, function () {
console.log('The server is running on https://localhost:443')
})
FAQs
For managing certificates when developing Office Add-ins.
The npm package office-addin-dev-certs receives a total of 134,872 weekly downloads. As such, office-addin-dev-certs popularity was classified as popular.
We found that office-addin-dev-certs demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
Socket researchers discovered nine malicious NuGet packages that use time-delayed payloads to crash applications and corrupt industrial control systems.

Security News
Socket CTO Ahmad Nassri discusses why supply chain attacks now target developer machines and what AI means for the future of enterprise security.

Security News
Learn the essential steps every developer should take to stay secure on npm and reduce exposure to supply chain attacks.