
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
A little CLI that uses gulp and browsersync to inject files on to a proxied site with live reloading and style injecting
A tool that helps making tying new things on a page easier. This CLI uses gulp to process scss, css, and js files. At the moment there is no way to customize the gulpfile (should be coming later). Once the files are processed and put into a dist folder the CLI starts up an instance of BrowserSync and uses that to proxy the site you want to make local non permanent adjustments.
Note: While this tool makes use of the words proxy and inject. Nothing is actually sent back to the sites server. Everything is done localy. Think overrides in chrome or making adjustments to the css in inspector.
npm i -d proxma
or
npm i -g proxma
proxma
.proxmarc settings file. If it doesn't find one it will set
one up for you as well as some starting folders.proxma command and it will run gulp and then
start the local server.Note: In order for things to work you must stay on the localhost proxy sometimes when you click a link that is not relative it will take you to the real domain and not the proxied one. The none proxied page will not have the files added.
Proxma looks for CSS, SCSS, and JS files in the src folder. It will run gulp on those files and put
them in the dist folder.
FAQs
A little CLI that uses gulp and browsersync to inject files on to a proxied site with live reloading and style injecting
The npm package proxma receives a total of 2 weekly downloads. As such, proxma popularity was classified as not popular.
We found that proxma demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.