
Research
Malicious npm Packages Impersonate Flashbots SDKs, Targeting Ethereum Wallet Credentials
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
packages-list-extractor
Advanced tools
A simple node module that extracts npm packages from package.json with multiple options.
npm i -g packages-list-extractor
packages-list-extractor
The packages-list-extractor
takes 2 argumnets.
The first being the file path to write to, defaults to 'dependencies.md'.
The second being the file path to package.json, defaults to 'package.json'.
To fallback to default arguments, add -d as the argument.
Run git clone https://github.com/A-Tokyo/packages-list-extractor
Edit the template text in src/index.js
Run npm link
Use as mentioned in the getting started section.
packages-list-extractor
Runs with default paths.packages-list-extractor -d assets/filename.md
Runs with default path for package.json
and writes into assets/filename.md
packages-list-extractor ../../package.json
Runs on ../../package.json
and writes to the default path dependancies.md
.# Dependancies:
Package Name: package-name, Package Url: https://www.npmjs.com/package/package-name, Version: ^1.0.0
# Dev Dependancies:
Package Name: dev-package-name, Package Url: https://www.npmjs.com/package/dev-package-name, Version: ^1.0.0
FAQs
Extracts packages with multiple options from package.json
The npm package packages-list-extractor receives a total of 1 weekly downloads. As such, packages-list-extractor popularity was classified as not popular.
We found that packages-list-extractor demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
Security News
Ruby maintainers from Bundler and rbenv teams are building rv to bring Python uv's speed and unified tooling approach to Ruby development.
Security News
Following last week’s supply chain attack, Nx published findings on the GitHub Actions exploit and moved npm publishing to Trusted Publishers.