
Research
/Security News
Toptal’s GitHub Organization Hijacked: 10 Malicious Packages Published
Threat actors hijacked Toptal’s GitHub org, publishing npm packages with malicious payloads that steal tokens and attempt to wipe victim systems.
remote-manage-config-page
Advanced tools
yarn install
To render different pages on your local server, e.g. IP allow list
or Webhook allow list
cd into src/shared/utils/helper.ts
and update the following function findConfigPage()
For Dev
environment return the config page you want render. Example: Webhook allow list
update it to Pages.WebhookAllowList
Run yarn install
and yarn build
inside the projects/lib/sui-forms
directory, as the admin-config-ui
project depends on a few projects inside the sui-forms
directory.
yarn install
& yarn build
commands inside each of the ui-platform projects that admin-config-ui project depends on.Build the js assets with yarn build
.
Start local server with yarn dev
.
yarn build # production build
# or
yarn dev # dev build
Check your node version
nvm
to easily check and switch between different version of node.Delete the .yarn
directory from various locations and retry.
yarn install
or yarn build
previously.To release these code changes in the SPLCORE/main repo, we need to generate a new tarball of the admin-config-ui project, upload the same to Artifactory, & finally update the main
repo to use this version during it's build time.
Perform the following steps from the root folder i.e. remotes-admin-config-ui/admin-config-ui
(a.k.a $ROOT) -
Bump up the minor version in $ROOT/package.json
.
Generate & upload the package as a tarball - run yarn gen-tarball:upload
.
Note that before you upload, you need to get added to the following GroupIDs -
More info on getting that access can be found here. You just need to access request from the Groups Self Service page
Enter your AD password to upload the package to artifactory. If the upload is successful you should see the following in your terminal:
upload_archive.py: uploaded /Users/.../remotes-admin-config-ui/admin-config-ui/remote-manage-config-page-<version>.tar.gz to <https://repo.splunk.com/artifactory/splunkcore-apps/skinny-apps/release/remote-manage-config-page-<version>.tar.gz-<SHA>>; SHA256=8ee9...
Next steps:
- copy SHA256
- inside the "main" repo, open the "$SPLUNK_SOURCE/component_package_manager/components.json" file
- update the field - version inside "remote-manage-config-page" block to <version>
- and paste the SHA256 outputted here to the field - sha256
- commit changes & raise an MR on the "main" repo
Once the upload is successful, the package should be found on Artifactory here. For e.g. remote-manage-config-page-1.0.0.tar.gz
.
Kick-off a new cloud build in Chaperone using the above commit. (Make sure to check the "Publish to SplunkCloud" checkbox on the Advanced tab)
Once the build is ready, create a new CO2 stack and test the changes.
yarn remote-build-tool build
Note: You will typically want to do this from CICD.
yarn remote-build-tool publish
FAQs
## Building
The npm package remote-manage-config-page receives a total of 0 weekly downloads. As such, remote-manage-config-page popularity was classified as not popular.
We found that remote-manage-config-page demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
/Security News
Threat actors hijacked Toptal’s GitHub org, publishing npm packages with malicious payloads that steal tokens and attempt to wipe victim systems.
Research
/Security News
Socket researchers investigate 4 malicious npm and PyPI packages with 56,000+ downloads that install surveillance malware.
Security News
The ongoing npm phishing campaign escalates as attackers hijack the popular 'is' package, embedding malware in multiple versions.