Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
vite-plugin-haxe
Advanced tools
Lets you run Haxe code in your Vite project. Supports client-side javascript currently.
Prerequisites: Haxe and Node.js.
npm
is gladly substituted for pnpm.
Open a terminal in your project folder and execute this:
npm create vite@latest my-haxe-app --template vanilla
cd my-haxe-app
npm install
npm install -D vite-plugin-haxe
Add a vite.config.js:
import { defineConfig } from "vite";
import haxe from "vite-plugin-haxe";
/** @type {import('vite').UserConfig} */
export default defineConfig({
plugins: [haxe()],
});
Add/edit the following files:
main.js
import "./style.css";
import "./main.hxml";
main.hxml
-cp src
-main Main
-dce full
# -js isn't needed, but helpful for IDE's.
-js main.js
-D source-map-content
-debug
src/Main.hx
package;
import js.Browser.document;
import js.html.ButtonElement;
class Main {
static function main() {
document.getElementById('app')
.innerHTML = '
<div>
<a href="https://vitejs.dev" target="_blank">
<img src="/vite.svg" class="logo" alt="Vite logo" />
</a>
<a href="https://haxe.org/" target="_blank">
<img src="https://upload.wikimedia.org/wikipedia/commons/8/89/Haxe_logo.svg" class="logo vanilla" alt="Haxe logo" />
</a>
<h1>Vite + Haxe</h1>
<div class="card">
<button id="counter" type="button"></button>
</div>
<p class="read-the-docs">
Click on the Vite and Haxe logos to learn more
</p>
</div>
';
Counter.setupCounter(cast(document.querySelector('#counter'), ButtonElement));
}
}
class Counter {
public static function setupCounter(element:ButtonElement) {
var counter = 0;
final setCounter = (count:Int) -> {
counter = count;
element.innerHTML = 'count is $counter';
}
element.addEventListener('click', () -> setCounter(counter + 1));
setCounter(0);
}
}
Start the fun with npm run dev
.
FAQs
Lets you run Haxe code in your Vite project.
The npm package vite-plugin-haxe receives a total of 1 weekly downloads. As such, vite-plugin-haxe popularity was classified as not popular.
We found that vite-plugin-haxe demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.