
Research
Two Malicious Rust Crates Impersonate Popular Logger to Steal Wallet Keys
Socket uncovers malicious Rust crates impersonating fast_log to steal Solana and Ethereum wallet keys from source code.
remark-bookmarks
Advanced tools
remark plugin to manage links.
npm:
npm install remark-bookmarks
Say we have the following file, example.md
:
`remark-bookmarks` is on [npm][]!
And our script, example.js
, looks as follows:
const vfile = require('to-vfile')
const remark = require('remark')
const bookmarks = require('remark-bookmarks')
remark()
.use(bookmarks, {
bookmarks: {
github: 'https://github.com/remarkjs/remark-bookmarks',
npm: 'https://npmjs.com/package/remark-bookmarks'
}
})
.process(vfile.readSync('example.md'), function(err, file) {
if (err) throw err
console.log(String(file))
})
Now, running node example
yields:
`remark-bookmarks` is on [npm][]!
[npm]: https://npmjs.com/package/remark-bookmarks
remark().use(bookmarks[, options])
Manage links.
options
options.bookmarks
The URLs to share across Markdown documents (Object.<string>
).
References are case insensitive.
options.overwrite
Pass overwrite: true
to ensure that references are used consistently.
By default (false
), the existing references in the file will take precedence
over anything defined globally.
options.bookmarks
is used and injected into the tree as definitions when the
content references them.
This could open you up to a cross-site scripting (XSS) attack if you pass
user provided content as bookmarks.
This may become a problem if the Markdown later transformed to rehype (hast) or opened in an unsafe Markdown viewer.
remark-inline-links
— Transform references and definitions into normal links and imagesremark-defsplit
— Transform links and images into references and definitions with
URI-based identifiersremark-reference-links
— Transform links and images into references and definitionsremark-unlink
— Remove all links, references and definitionsSee contributing.md
in remarkjs/.github
for ways
to get started.
See support.md
for ways to get help.
This project has a code of conduct. By interacting with this repository, organization, or community you agree to abide by its terms.
FAQs
remark plugin to manage links
The npm package remark-bookmarks receives a total of 694 weekly downloads. As such, remark-bookmarks popularity was classified as not popular.
We found that remark-bookmarks demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Socket uncovers malicious Rust crates impersonating fast_log to steal Solana and Ethereum wallet keys from source code.
Research
A malicious package uses a QR code as steganography in an innovative technique.
Research
/Security News
Socket identified 80 fake candidates targeting engineering roles, including suspected North Korean operators, exposing the new reality of hiring as a security function.