Security News
Research
Data Theft Repackaged: A Case Study in Malicious Wrapper Packages on npm
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
Note: Its works stably for nodejs 12+ |
---|
Ungic packer is a web template development environment with modular Dart Sass framework and a set of tools for web coder.
Its purpose is to facilitate the preparation of materials to front-end, but rather, helps to solve the following tasks:
To work with css, i developed a sophisticated framework that allows you to write components quickly and use them in your projects, each component can interact with another component using its functionality, in addition to components, there are other features, the features of the framework will be listed below
For more information you can visit the project website
Project website: packer.ungic.com
Source code in a bitbucket
NPM - npm install ungic -g
Author unbywyd
FAQs
Development environment for web layout
The npm package ungic receives a total of 1 weekly downloads. As such, ungic popularity was classified as not popular.
We found that ungic demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Research
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
Research
Security News
Attackers used a malicious npm package typosquatting a popular ESLint plugin to steal sensitive data, execute commands, and exploit developer systems.
Security News
The Ultralytics' PyPI Package was compromised four times in one weekend through GitHub Actions cache poisoning and failure to rotate previously compromised API tokens.