
Security News
/Research
Wallet-Draining npm Package Impersonates Nodemailer to Hijack Crypto Transactions
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
rollup-plugin-html-bundle
Advanced tools
Generates a html file from a template that either has the bundle included using a script-tag with src or inlined in a script-tag
Will by default place a query string with v = Date.now() at the end of the path
Example use in rollup.config.js
:
import htmlBundle from 'rollup-plugin-html-bundle';
export default {
input: entry,
output: {
file: 'dist/bundle.js',
format: 'iife',
sourcemap: true
},
plugins: [
htmlBundle({
template: 'src/template.html',
target: 'dist/index.html'
})
// or just
htmlBundle()
]
}
The default options are:
template: 'src/template.html',
target: 'dist/index.html',
targetElement: 'body',
timestamp: true,
inline: false,
async: false,
defer: false
Example input template:
<!doctype html>
<html lang="en">
<head>
<meta charset="utf-8">
</head>
<body>
</body>
</html>
Output for example input with default options:
<!doctype html>
<html lang="en">
<head>
<meta charset="utf-8">
</head>
<body>
<script src="bundle.js?v=1534636516765"></script>
</body>
</html>
Tested on Node.js v. 10.8.0 and Rollup v. 0.62.0
FAQs
Generates a html file from a template that either has the bundle included using a script-tag with src or inlined in a script-tag
The npm package rollup-plugin-html-bundle receives a total of 685 weekly downloads. As such, rollup-plugin-html-bundle popularity was classified as not popular.
We found that rollup-plugin-html-bundle demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
/Research
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
Security News
This episode explores the hard problem of reachability analysis, from static analysis limits to handling dynamic languages and massive dependency trees.
Security News
/Research
Malicious Nx npm versions stole secrets and wallet info using AI CLI tools; Socket’s AI scanner detected the supply chain attack and flagged the malware.