Research
/Security News
Miasma Mini Shai-Hulud Hits ImmobiliareLabs npm Packages
Miasma Mini Shai-Hulud hits @immobiliarelabs Backstage plugins, targeting GitLab and LDAP auth packages on npm.
By Socket Research Team - Jun 26, 2026
🚀 Socket Launch Week Day 5:Introducing Repository Access Permissions and Custom Roles.Learn more →
venus-miniprogram
Advanced tools
微信小程序开发引擎，类似venus-webpack
- 提供
serve (venus serve)启动当前业务开发项目, 并watch文件变化，小程序npm映射，自动安装，mock服务，本地图片资源虚拟服务器. - 提供
build (venus build)打包压缩优化当前业务项目 - 提供
publish (venus publish)上传静态图片资源到CDN - 提供
zip (venus zip)简单打包编译代码到zip
- mock服务使用
venus-mock直接提供.
TODO
- build 模块
- image 同步了，同时less抽取的时候提取了hashname导致多了一个文件
- venus cli的整合机制。
- async await 支持的时候产生了很多调试代码
FAQs
小程序类似venus-webpack一样的脚手架引擎
The npm package venus-miniprogram receives a total of 2 weekly downloads. As such, venus-miniprogram popularity was classified as not popular.
We found that venus-miniprogram demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Package last updated on 23 Apr 2021
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Related posts
Security News
Rolldown Pulls Rust React Compiler Integration After Binary Size Increase
Rolldown paused Rust React Compiler integration after a 5MB binary size increase raised concerns about shipping React-specific code to all Vite users.
By Sarah Gooding - Jun 26, 2026
Security News
/Research
Miasma Mini Shai-Hulud Hits LeoPlatform npm Packages and GitHub Actions, Expands to the Go Ecosystem
Mini Shai-Hulud expands into the Go ecosystem after hitting LeoPlatform npm packages and targeting GitHub Actions workflows.
By Socket Research Team - Jun 25, 2026