Research
Security News
Quasar RAT Disguised as an npm Package for Detecting Vulnerabilities in Ethereum Smart Contracts
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
Behaviors and access to Retold stuff in the browser.
Uses browserify to generate dist/pict.* and such from node modules.
This module is rife with luxury code. If you have docker installed, you can code, run, debug and manage the library from a browser with working debugger breakpoints. This requires docker and node.js to function.
First build the docker container for our code-server service by running:
npm run docker-dev-build
Secondly, create a running instance of the docker container by running:
npm run docker-dev-run
The container will create itself locally with the container name retold-pict-dev
and
map a couple ports:
Port | Service |
---|---|
60000 | Browser-based Visual Studio Code Server |
63306 | MariaDB Server (for unit tests) |
60086 | Example meadow-endpoints API service (for unit tests using MariaDB) |
This means in a browser on your computer you can go to http://localhost:6000/ and login
with the password luxury
to begin editing code with browser-based visual studio. If
you want, you can edit code locally and just use the docker environment for unit tests.
An easy shortcut to shell into the docker environment is provided, giving you a quick
bash terminal to the instance:
npm run docker-dev-shell
The unit tests require a one-time data import operation, so they can request records from REST endpoints. Steps to prepare the data within the Docker container (either via the visual studio code terminal in the browser, or, the docker-dev-shell command above):
cd retold-harness
npm i
./Bookstore-Import-Books.sh
These commands do the following:
It is annoying to keep the terminal running to have API endpoints. An easy and very, extremely, awesomely stable way to run it in the background within the docker container is through the tmux command.
tmux
cd retold-harness
npm i
node bookstore-serve-meadow-endpoint-apis-run.js
Then you can press [ctrl-b] and then [d] to detach from the tmux terminal. If you
ever want to go back and watch the REST logs, or, restart the service, you can run
tmux attach
to reattach to the running sessions.
If the docker container restarts, the tmux will no longer be running.
You can either execute the unit tests through the visual studio code test running interface via the browser (allowing you to leverage breakpoints for each test) or within the Docker terminal by running (from the pict folder):
npm test
These commands build and package the minified and nonminified versions into dist/
with
source maps.
npm run build
npm run build-compatible
(more to come)
FAQs
Pict browser library.
The npm package pict receives a total of 97 weekly downloads. As such, pict popularity was classified as not popular.
We found that pict demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
Security News
Research
A supply chain attack on Rspack's npm packages injected cryptomining malware, potentially impacting thousands of developers.
Research
Security News
Socket researchers discovered a malware campaign on npm delivering the Skuld infostealer via typosquatted packages, exposing sensitive data.