
Research
Malicious npm Packages Impersonate Flashbots SDKs, Targeting Ethereum Wallet Credentials
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
npx plgn login
Authenticate with Plugin Pro. Opens a browser window to complete GitHub authentication and links your CLI session to your Plugin Pro account.
npx plgn logout
Sign out from Plugin Pro. This will remove your authentication credentials from the CLI.
npx plgn compose
Compose a config plugin based on your manual native changes. Outputs a file to the plugins/
directory.
File modifications are handled differently based on the file type:
Structured: The file has a specific format that can be easily modified. For example, JSON, XML, and plist files. Moifications can be mapped to specific plugins, such as withInfo
or withEntitlements
.
Unstructured: The file does not have a specific format, and can contain any code. For example, Swift, Kotlin, and Objective-C files. Modifications are handled by merging the changes with the existing file via the withModifyFile
plugin.
When you add a new file, it will generate the appropriate plugin action. The file will also be copied into the plugins/
directory, using the same relative path. This means that you can manage your new files outside of your native directories. For example, let's say you add a new Swift file to your ios/
directory.
The following will be added to your plugin:
[withSourceFile, { filePath: "ios/NewFile.swift" }];
And the file will be copied into the plugins/
directory:
plugins/
ios/
NewFile.swift
When you remove a file, the plugin action will delete the file and remove any references to it.
FAQs
## Commands
The npm package plgn receives a total of 25 weekly downloads. As such, plgn popularity was classified as not popular.
We found that plgn demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
Security News
Ruby maintainers from Bundler and rbenv teams are building rv to bring Python uv's speed and unified tooling approach to Ruby development.
Security News
Following last week’s supply chain attack, Nx published findings on the GitHub Actions exploit and moved npm publishing to Trusted Publishers.