
Security News
/Research
Wallet-Draining npm Package Impersonates Nodemailer to Hijack Crypto Transactions
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
A CLI and templating toolkit to streamline development of Veeva CLM Presentations.
If you're developing and managing multiple Veeva CLM projects, it can be time-consuming to manage consistent code and workflows. This package centralizes core functionality for building and deploying Veeva CLM Presentations.
configuration.yml
veeva:
protocol linksEnsure the following dependencies are installed:
brew install imagemagick
apt-get install imagemagick
npm install veeva --save
Place the following structure in your project root directory:
root/
โโโ app/
โ โโโ assets/
โ โ โโโ scss/
โ โ โโโ js/
โ โโโ templates/
โ โโโ data/
โ โ โโโ clm.yml
โ โโโ includes/
โ โโโ layouts/
โ โโโ pages/
โ โโโ shared/
โ โ โโโ fonts/
โ โ โโโ images/
โ โ โโโ isi.hbs
โ โ โโโ terms.hbs
โ โโโ home/
โ โโโ overview/
โ โโโ resources/
โ โโโ sitemap/
โโโ configuration.yml
โโโ package.json
Key Message naming convention: product-name-key-message-name
app/assets/scss
app/assets/js
app/templates
Define Key Messages under the clm
node:
clm:
product:
name: 'Product-Name'
suffix: '-'
primary:
name: 'CLM-Presentation-ID'
key_messages:
- key_message: 'home'
description: 'Home'
display_order: '0'
slides:
- slide: 'home'
id: '0'
- key_message: 'overview'
description: 'Veeva Test Overview'
display_order: '1'
slides:
- slide: 'Veeva Test Overview'
id: '2-0'
- key_message: 'sitemap'
description: 'Sitemap'
display_order: '2'
slides:
- slide: 'Sitemap'
id: '0-1'
Update paths in configuration.yml
as needed:
paths:
src: "app"
dist: "build"
deploy: "deploy"
tmp: "build/.tmp"
pages: "app/templates/pages"
layouts: "app/templates/layouts"
๐ก Tip: YAML files must use spaces (not tabs).
veeva --help
Command | Description |
---|---|
veeva | Starts dev mode: builds, watches, reloads |
veeva build | Production build: compiles/minifies everything |
veeva stage | Builds + generates zip/ctl files per Key Message |
veeva deploy | Uploads zip/ctl files via FTP (requires config) |
veeva vault-stage | Generates Vault Multichannel CSV file |
Option | Description |
---|---|
-a , --all-key-messages | Include hidden Key Messages |
-c , --config | Show merged configuration |
-d , --dry-run | Preview commands without execution |
-e , --debug | Output error tracebacks |
-h , --help | Print help message |
-k , --key-message | Run tasks for a single Key Message |
-v , --version | Show version number |
-V , --verbose | Enable verbose output |
package.json
)configuration.yml
is valid YAML (use a linter if needed).html
files; static assets like .pdf
require manual thumbnailsSubmit issues or feature requests via GitHub Issues.
Pull requests are welcome! For major changes, please open an issue first to discuss what youโd like to change.
For more examples, see the CLM Example Project.
3.1.0 (2025-08-01)
FAQs
Veeva CLM Generator & Workflow for building iRep Presentations.
The npm package veeva receives a total of 22 weekly downloads. As such, veeva popularity was classified as not popular.
We found that veeva demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago.ย It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
/Research
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
Security News
This episode explores the hard problem of reachability analysis, from static analysis limits to handling dynamic languages and massive dependency trees.
Security News
/Research
Malicious Nx npm versions stole secrets and wallet info using AI CLI tools; Socketโs AI scanner detected the supply chain attack and flagged the malware.