
Research
npm Malware Targets Telegram Bot Developers with Persistent SSH Backdoors
Malicious npm packages posing as Telegram bot libraries install SSH backdoors and exfiltrate data from Linux developer machines.
A utility to generate strongly typed dicitonary of the css selectors available in html files.
A utility to generate strongly typed dicitonary of the css selectors available in html files
> typesheet --help
usage: typesheet [options] [files or globs]
--init -i run initial pass on all matched files, default: false
--output -o output directory, default: '.'
--filterRegex -f class name filter matches are kept , default: '.*' i.e. all classes
[files or globs] files or glob pattern to watch, default : **/*.(cshtml|html)
glob reference:
https://github.com/isaacs/node-glob
<div id="container">
<!-- Example row of columns -->
<div class="row">
<div class="col-md-4">
<h2>Heading</h2>
<p><a class="btn btn-default" href="#" role="button">View details »</a></p>
</div>
<div class="col-md-4">
<h2>Heading</h2>
<p><a class="btn btn-default" href="#" role="button">View details »</a></p>
</div>
<div class="col-md-4">
<h2>Heading</h2>
<p><a class="btn btn-default" href="#" role="button">View details »</a></p>
</div>
</div>
> node typesheet.js -i -o typings index.html
Waiting for changes in: index.html
TypeSheet Ready: typings/index.ts
namespace TypeSheet.index {
/**
* .btn
*
* 1x <a class="btn btn-primary btn-lg" href="#" role="button">
* 3x <a class="btn btn-default" href="#" role="button">
*/
export const btn : string = ".btn";
/**
* .btn-primary
*
* 1x <a class="btn btn-primary btn-lg" href="#" role="button">
*/
export const btnPrimary : string = ".btn-primary";
/**
* .btn-lg
*
* 1x <a class="btn btn-primary btn-lg" href="#" role="button">
*/
export const btnLg : string = ".btn-lg";
/**
* .container
*
* 2x <div id="container">
*/
export const containerId : string = "#container";
/**
* .jumbotron
*
* 1x <div class="jumbotron">
*/
export const jumbotron : string = ".jumbotron";
/**
* .btn-default
*
* 3x <a class="btn btn-default" href="#" role="button">
*/
export const btnDefault : string = ".btn-default";
/**
* .col-md-4
*
* 3x <div class="col-md-4">
*/
export const colMd4 : string = ".col-md-4";
/**
* .row
*
* 1x <div class="row">
*/
export const row : string = ".row";
/**
* .no-js
*
* 1x <html class="no-js" lang="">
*/
export const noJs : string = ".no-js";
}
MIT
FAQs
A utility to generate strongly typed dicitonary of the css selectors available in html files.
The npm package typesheet receives a total of 8 weekly downloads. As such, typesheet popularity was classified as not popular.
We found that typesheet demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Malicious npm packages posing as Telegram bot libraries install SSH backdoors and exfiltrate data from Linux developer machines.
Security News
pip, PDM, pip-audit, and the packaging library are already adding support for Python’s new lock file format.
Product
Socket's Go support is now generally available, bringing automatic scanning and deep code analysis to all users with Go projects.