Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
A visual programming language. Visit https://xible.io for more information.
Once you have Node.js installed, simply run;
sudo npm install -g xible
After installation is completed;
xible server start
To automatically start XIBLE on boot (requires a Linux installation);
sudo xible service enable
sudo xible service start
to start it immediately.The browser based graphical editor which comes with XIBLE is currently only supported by the Google Chrome browser; versions 53 and up. Opera, which is based on the same engine as Chrome, is also supported starting from version 44.
Other browsers may work, but some editor functionality is unavailable if Shadow DOM v1 is not implemented. It will be possible to start, stop and delete flows, but deploying and saving is disabled. Also, the detail settings of nodes are not visible.
[0.6.0][] - 2017-06-09
Node inputs now have a string value assignsOutputType
that allows the given output to be assigned the same type as the input. See the node structure documentation for more information.
The default zoomstate of a flow in the editor can be changed through the settings. The value is stored in the configuration file as editor.viewstate.zoomstateonopen
.
The maximum amount of statuses visible on any node in the editor can be changed through the settings. The value is stored in the configuration file as editor.nodes.statuses.max
. (#13)
A flow saves some performance metrics in the timing object. This object is only available on flows in the main thread.
xible-wrapper is now fetched from npm. It used to be distributed within the xible package itself.
All xiblepm commands deliver the user-auth-token header to the registry, if the user is logged in. Previously, the user token was only sent for publish commands.
FAQs
xible
The npm package xible receives a total of 16 weekly downloads. As such, xible popularity was classified as not popular.
We found that xible demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.