
Research
Malicious fezbox npm Package Steals Browser Passwords from Cookies via Innovative QR Code Steganographic Technique
A malicious package uses a QR code as steganography in an innovative technique.
npm create vvdoc
npm i
npm run dev
{
"title": "vvModal", // 文档标题
"logo": "", // 文档logo
"repository": "https://github.com/zwmmm/vvModal", // 代码仓库地址
"menus": { // 右上角的菜单
"/": "首页",
"/apis": "API",
"http://www.baidu.com": "外链"
},
"chapters": { // 对应页面的 侧边栏菜单
"apis": [
{
"name": "Apis",
"children": [
{
"name": "create",
"path": "/apis"
},
{
"name": "show",
"path": "/apis/show"
},
{
"name": "antdModal",
"path": "/apis/antdModal"
}
]
},
{
"name": "Hooks",
"children": [
{
"name": "useModal",
"path": "/apis/useModal"
},
{
"name": "useShow",
"path": "/apis/useShow"
},
{
"name": "useHide",
"path": "/apis/useHide"
}
]
}
]
}
}
当你需要自定义入口,比如全局修改Antd的配置
根目录新增一个 index.tsx
import { ConfigProvider } from 'antd'
import zhCN from 'antd/lib/locale/zh_CN'
export default function (props: any) {
return (
<ConfigProvider locale={zhCN} componentSize="small">
{props.children}
</ConfigProvider>
)
}
FAQs
1. 开箱即用,快速生成文档站点 2. 基于vite 启动速度快,编写体验极佳 3. 支持文档搜索 4. 自动生成文章目录 5. 自定义主题
The npm package vvdoc receives a total of 4 weekly downloads. As such, vvdoc popularity was classified as not popular.
We found that vvdoc demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
A malicious package uses a QR code as steganography in an innovative technique.
Research
/Security News
Socket identified 80 fake candidates targeting engineering roles, including suspected North Korean operators, exposing the new reality of hiring as a security function.
Application Security
/Research
/Security News
Socket detected multiple compromised CrowdStrike npm packages, continuing the "Shai-Hulud" supply chain attack that has now impacted nearly 500 packages.