
Research
Malicious npm Packages Impersonate Flashbots SDKs, Targeting Ethereum Wallet Credentials
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
This little tool is based on haxeshim to switch between coexisting Haxe versions. As for usage, the command line doc pretty much says it all:
switchx - haxe version switcher
Supported commands:
install [<version>] : installs the version if specified, otherwise
installs the currently configured version
download <version> : downloads the specified version
use <version> : switches to the specified version
scope [create|delete|set] : creates, deletes or configures
[scoped|mixed|haxelib] the current scope or inspects it
if no argument is supplied
list : lists currently downloaded versions
Supported switches
--silent : disables logging
--global : performs operation on global scope
--force : forces re-download
Version aliases
edge, nightly : latest nightly build from builds.haxe.org
latest : latest official release from haxe.org
stable : latest stable release from haxe.org
Note that in switch
version aliases refer to the latest installed version of that kind while otherwise they refer to the latest version found online. Please refer to the haxeshim doc for library resolution strategies
Not as smooth as it could be, but npm install haxeshim -g && npm install switchx -g && switchx
basically kind of does it.
For the most parts, please refer to the haxeshim documentation. Note though that currently on linux the 64 bit version is always installed. This is a matter of initializing Switchx.PLATFORM
right.
Ah, here comes the fun part. The simplest way right now is to:
switchx
first (through npm)switchx install
in the checked out directorynpm install
haxe switchx.hxml
.FAQs
Switch Haxe versions like a sir.
The npm package switchx receives a total of 1 weekly downloads. As such, switchx popularity was classified as not popular.
We found that switchx demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
Security News
Ruby maintainers from Bundler and rbenv teams are building rv to bring Python uv's speed and unified tooling approach to Ruby development.
Security News
Following last week’s supply chain attack, Nx published findings on the GitHub Actions exploit and moved npm publishing to Trusted Publishers.