Research
Security News
Threat Actor Exposes Playbook for Exploiting npm to Build Blockchain-Powered Botnets
A threat actor's playbook for exploiting the npm ecosystem was exposed on the dark web, detailing how to build a blockchain-powered botnet.
superdesk-publisher
Advanced tools
This is a plugin for superdesk. The Superdesk Publisher is an API-centric delivery tool for all digital platforms. Written from scratch in 2016, it utilizes the knowledge gained from 17 years of delivering digital news at scale with Newscoop. The Publisher is designed to work with any editorial system. Naturally, it works the best with our in-house newsroom management system, Superdesk. Therefore, it allows independent maintenance, upgrade and change of the editorial back-end system.
In order for Superdesk to expose the Publisher module, you must configure it in client config files.
Add the dependency to your instance of superdesk.
In superdesk/client/package.json
add superdesk-publisher
to the dependencies
(replacing #a79d428
with the specific commit you require):
"dependencies": {
....,
"superdesk-publisher": "superdesk/superdesk-publisher#a79d428"
}
After that, run npm install to install additional dependencie.
Don't forget to add publisher to your superdesk config in superdesk/client/superdesk.config.js
, and
to enable the publisher feature:
apps: [
....,
'superdesk-publisher'
],
publisher: {
protocol: 'http',
tenant: 'tenant-1',
domain: 'website.com',
base: 'api/v1',
wsDomain: 'WebSocketDomain.com',
wsPath: '/ws',
wsPort: '8080'
},
publisher.tenant - publisher tenant name publisher.domain - publisher domain publisher.base - publisher base url publisher.wsDomain - publisher websocket domain address publisher.wsPort - publisher websocket path publisher.wsPort - publisher websocket port
This will import the superdesk-publisher
node module and load the superdesk.publisher
angular module in the main angular application.
First you will need to clone the repo from GitHub. In the root folder where your current superdesk folder is, run the following:
git clone git@github.com:superdesk/superdesk-publisher.git
Running the following will link the superdesk-publisher module in development mode:
cd superdesk/client
npm install
npm link ../../superdesk-publisher
cd ../..
Code Style
cd superdesk-publisher
npm run hint
cd ..
Unit Tests
cd superdesk-publisher
npm run unit_test
cd ..
FAQs
Superdesk Publisher component
The npm package superdesk-publisher receives a total of 2 weekly downloads. As such, superdesk-publisher popularity was classified as not popular.
We found that superdesk-publisher demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
A threat actor's playbook for exploiting the npm ecosystem was exposed on the dark web, detailing how to build a blockchain-powered botnet.
Security News
NVD’s backlog surpasses 20,000 CVEs as analysis slows and NIST announces new system updates to address ongoing delays.
Security News
Research
A malicious npm package disguised as a WhatsApp client is exploiting authentication flows with a remote kill switch to exfiltrate data and destroy files.