
Research
Malicious NuGet Packages Typosquat Nethereum to Exfiltrate Wallet Keys
The Socket Threat Research Team uncovered malicious NuGet packages typosquatting the popular Nethereum project to steal wallet keys.
uploadcare-netlifycms
Advanced tools
File Uploader by Uploadcare. The plugin for NetlifyCMS to work with Uploadcare Widget.
This plugin powers your NetlifyCMS with Uploadcare. You will be able to:
Check out how it works via the demo based on netlify-templates/one-click-hugo-cms.
You are free to register, but since Git Gateway is disabled, you won’t be able to publish your changes.
The source code of our demo can be found here.
This plugin can be installed via NPM:
npm install uploadcare-netlifycms --save
Just import and initialize uploadcare-netlifycms
:
import CMS from "netlify-cms";
import uploadcare from "uploadcare-netlifycms";
uploadcare();
Note, uploadcare-netlifycms
should be initialized after importing netlify-cms
.
There is only one required option, your public API key. You can
get one by signing up for Uploadcare. Another option is using
demopublickey
for testing purposes. But note, we are wiping out all files on
our demo account every few hours.
uploadcare({
effectsTab: true,
widgetOptions: {
publickey: "yourpublickey"
}
});
The effectsTab
property specifies whether in-browser image editing should be
enabled. widgetOptions
get passed to the widget. Check out our
widget docs to learn more about its options.
You can implement our widget in your Editor Component as a field:
{
fields: [
{
name: "fileInfo",
options: {
multiple: true
},
label: "Uploadcare",
widget: "uploadcare"
}
];
}
uploadcare
stands for the widget type, it’s a constant.
options
are passed to the widget. Learn more about options in the
widget docs.
fileInfo
stands for the widget value name. It follows the widget’s
fileInfo
structure. When restored from a markdown block, it
will at least contain the cdnUrl
and name
properties: they are used for
a preview.
If you think you ran into something in Uploadcare libraries which might have security implications, please hit us up at bugbounty@uploadcare.com or Hackerone.
We'll contact you personally in a short time to fix an issue through co-op and prior to any public disclosure.
Issues and PRs are welcome. You can provide your feedback or drop us a support request at hello@uploadcare.com.
1.0.0, 2018-06-07
FAQs
File Uploader by Uploadcare. The plugin for NetlifyCMS to work with Uploadcare Widget.
We found that uploadcare-netlifycms demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
The Socket Threat Research Team uncovered malicious NuGet packages typosquatting the popular Nethereum project to steal wallet keys.
Product
A single platform for static analysis, secrets detection, container scanning, and CVE checks—built on trusted open source tools, ready to run out of the box.
Product
Socket is launching experimental protection for the Hugging Face ecosystem, scanning for malware and malicious payload injections inside model files to prevent silent AI supply chain attacks.