
Research
Malicious npm Packages Impersonate Flashbots SDKs, Targeting Ethereum Wallet Credentials
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
social-tags-webpack-plugin
Advanced tools
social-tags-webpack-plugin
is a webpack plugin that generates a the meta-tags to facebook and twitter, like this:
<meta property="fb:app_id" content="123456789">
<meta property="og:url" content="http://example.com/page.html">
<meta property="og:type" content="website">
<meta property="og:title" content="Content Title">
<meta property="og:image" content="http://example.com/image.jpg">
<meta property="og:description" content="Description Here">
<meta property="og:site_name" content="Site Name">
<meta property="og:locale" content="en_US">
<meta property="article:author" content="">
<meta name="twitter:card" content="summary">
<meta name="twitter:site" content="@site_account">
<meta name="twitter:creator" content="@individual_account">
<meta name="twitter:url" content="http://example.com/page.html">
<meta name="twitter:title" content="Content Title">
<meta name="twitter:description" content="Content description less than 200 characters">
<meta name="twitter:image" content="http://example.com/image.jpg">
npm install --save-dev social-tags-webpack-plugin
yarn add -D social-tags-webpack-plugin
In your webpack.config.js
:
// ES6+
const SocialTags = require('social-tags-webpack-plugin')
...
plugins: [
...
new SocialTags({
appUrl: 'http://example.com/',
facebook: {
'fb:app_id': "123456789",
'og:url': "http://example.com/page.html",
'og:type': "website",
'og:title': "Content Title",
'og:image': 'src/img/book.png',
'og:description': "Description Here",
'og:site_name': "Site Name",
'og:locale': "en_US",
'og:article:author': "",
},
twitter: {
"twitter:card": "summary",
"twitter:site": "@site_account",
"twitter:creator": "@individual_account",
"twitter:url": "http://example.com/page.html",
"twitter:title": "Content Title",
"twitter:description": "Content description less than 200 characters",
"twitter:image": './src/img/book.png'
},
})
]
FAQs
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
Security News
Ruby maintainers from Bundler and rbenv teams are building rv to bring Python uv's speed and unified tooling approach to Ruby development.
Security News
Following last week’s supply chain attack, Nx published findings on the GitHub Actions exploit and moved npm publishing to Trusted Publishers.