
Research
npm Malware Targets Telegram Bot Developers with Persistent SSH Backdoors
Malicious npm packages posing as Telegram bot libraries install SSH backdoors and exfiltrate data from Linux developer machines.
Universal Module Definition for use in automated build systems
return
style module supportIn order for the UMD wrapper to work the source code for your module should return
the export, e.g.
function method() {
//code
}
method.helper = function () {
//code
}
return method;
For examples, see the examples directory. The CommonJS module format is also supported by passing true as the second argument to methods.
options:
commonJS
(default: false
) - If commonJS is true
then it will accept CommonJS source instead of source code which return
s the module.The name
should the the name of the module. Use a string like name, all lower case with hyphens instead of spaces.
If source
should be a string, that is wrapped in umd and returned as a string.
return the text which will be inserted before a module.
return the text which will be inserted after a module.
Usage: umd <name> <source> <destination> [options]
Pipe Usage: umd <name> [options] < source > destination
Options:
-h --help Display usage information
-c --commonJS Use CommonJS module format
You can easilly pipe unix commands together like:
cat my-module.js | umd my-module | uglify-js > my-module.umd.min.js
The name
passed to umd
will be converted to camel case (my-library
becomes myLibrary
) and may only contain:
The name may not begin with a number. Invalid characters will be stripped.
MIT
FAQs
Universal Module Definition for use in automated build systems
We found that umd demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 4 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Malicious npm packages posing as Telegram bot libraries install SSH backdoors and exfiltrate data from Linux developer machines.
Security News
pip, PDM, pip-audit, and the packaging library are already adding support for Python’s new lock file format.
Product
Socket's Go support is now generally available, bringing automatic scanning and deep code analysis to all users with Go projects.