
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
Create a customized node binary with additional features
The xode project is a hackable, customizable binary that wraps node and adds additional features to it. The additional features are:
.js files (via a CommonJS transform).xode.The xode project is built on top of nexe.
npm installTo try out a xode binary based on node 12.16.2 with no additional builtin modules, you can install xode from npm:
npm install -g xode
Then, run it on the command line with the name of a script as its first argument:
xode myscript.ts
xode binary (no customizations)npm install.npm run build.xode binaries will be created in the build folder.npm install.node-version.js to whichever version of node you want your xode binary to be based on.npm run build.xode binaries based off of your specified node version will be created in the build folder.npm install.xode/builtins.js and add your additional packages to the xodeBuiltins object near the bottom of the file, using the example comment as a guide.npm run build.xode binaries with your additional builtin modules will be created in the build folder.xode uses babel internally to compile your source code to normal JavaScript right before it's run. By modifying the babel configuration xode uses, you can add support for additional syntax features.
npm install.xode/compile.js.npm run build.xode binaries that use your customized babel configuration will be created in the build folder.If you add builtin modules that use native code, you'll notice that a node_modules folder containing .node files gets created next to the xode/xode.exe binary in your build folder. You need to keep this node_modules folder next to the xode/xode.exe file for the native code to work correctly.
MIT
FAQs
> Create a customized node binary with additional features
We found that xode demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.