Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Base to start projects in HTML, simply and quickly.
Open a terminal at the root of your project
Optional step: run the following command in a terminal if your project is completely empty or presents location errors upon installation.
npm init
Execute
npm i sqhtml
npm explore sisass -- npm run init -- --dep sqhtml
Rename the gitignore file
mv gitignore .gitignore
To run the site if you don't have a configured localhost, run the following command:
nodemon --ext html,js,css,scss ./config/serve.js
In another terminal, run the gulp task with the -browser parameter as follows:
gulp -browser
If you want the browser to refresh when you make changes, you can run the gulp command with the following parameter
gulp -browser -sync
FAQs
Base to start projects in HTML, simply and quickly
The npm package sqhtml receives a total of 2 weekly downloads. As such, sqhtml popularity was classified as not popular.
We found that sqhtml demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.