Research
Security News
Threat Actor Exposes Playbook for Exploiting npm to Build Blockchain-Powered Botnets
A threat actor's playbook for exploiting the npm ecosystem was exposed on the dark web, detailing how to build a blockchain-powered botnet.
Starts a server running browserify so you can quickly develop web applications using the node.js/npm package system.
Here is how to run the example in test/
. First, install the serverify command globally:
sudo npm install -g serverify
Next, go into the test directory and run it:
cd test/
serverify
And that should start the server! You can navigate your browser to http://localhost:8080/index.html to view the test page.
By default, serverify bundles up the file called index.js
in the directory which it is run from and servers up static files contained in the ./www/
directory. The bundle is served at /bundle.js
. You can configure this behavior using the following parameters:
entry
: (Default: ./index.js
) The entry point for the project.www
: (Default: ./www/
) The static HTML directorybundle
: (Default: /bundle.js
) The web path to serve up the bundled project on.port
: (Default: 8080) The port on which the server is hosted.These parameters can be changed in one of the following ways:
You can override them via the command line, eg:
serverify --entry test.js
You can create a file called .serverify
in the same directory as your project which contains a JSON string describing the values for the parameters:
`echo "{port:9001}" > .serverify && serverify`
browserify --watch
?This only solves half the problem. You still need to launch a web server to host the files so that you can view them in your browser.
browserify-server is a bit more substantial and offers some extra features, like autogenerated scaffolding, configurable Makefiles and the ability to bundle images and HTML. If you want this stuff, then by all means go use it. On the other hand, if you just want to run a server with browserify and nothing else, then serverify may be a better solution.
Because I only found out about browservefy recently. Though very similar to serverify, it has a few small differences:
(c) 2013 Mikola Lysenko. MIT License
FAQs
Runs browserify in a server
We found that serverify demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
A threat actor's playbook for exploiting the npm ecosystem was exposed on the dark web, detailing how to build a blockchain-powered botnet.
Security News
NVD’s backlog surpasses 20,000 CVEs as analysis slows and NIST announces new system updates to address ongoing delays.
Security News
Research
A malicious npm package disguised as a WhatsApp client is exploiting authentication flows with a remote kill switch to exfiltrate data and destroy files.