
Research
Namastex.ai npm Packages Hit with TeamPCP-Style CanisterWorm Malware
Malicious Namastex.ai npm packages appear to replicate TeamPCP-style Canister Worm tradecraft, including exfiltration and self-propagation.
wmeimob
Advanced tools
美萌 vscode 插件,提供了一系列工具,帮助在项目开发过程中快速开发。
详细文档已迁移至美萌文档中心。请前端最新文档站点查看详细功能
已经移除的功能:
创建项目: 创建项目功能迁移至员工平台-项目git创建。请前往平台创建
废弃mm-config.js:目前不需要太多配置信息。此配置文件没有存在的必要。你可以安全的删除掉项目中的此文件
如何你想为公司插件开发助力。本篇会为你讲述如何开发发布一个插件
安装依赖并启动项目
yarn // 安装依赖
按下键盘上的F5键。插件会进行编译。并启动监听文件修改。当你修改文件后会自动编译。但是需要注意的是。启动的调试编译器不会自动刷新。需要你自己重启一下
当你完成插件开发后。只需要执行两个命令即可发布插件到插件市场
关于发布的更多信息。查看下面的链接
// 打包版本
yarn release:patch // 打一个修订本
yarn release:minor // 打一个小版本
yarn release:major // 打一个主版本
通过上面的命令将tag 推送到远端仓库后。会根据tag自动启动流水线构建与发布。并在发布结束后 企微通知相关人员。 当然你也可以通过下面的命令 手动发布
首先确保你登录并绑定了Personal Access Token
yarn pub // 发布至应用市场
FAQs
We found that 1814784429.wmeimob demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
Malicious Namastex.ai npm packages appear to replicate TeamPCP-style Canister Worm tradecraft, including exfiltration and self-propagation.

Product
Explore exportable charts for vulnerabilities, dependencies, and usage with Reports, Socket’s new extensible reporting framework.

Product
Socket for Jira lets teams turn alerts into Jira tickets with manual creation, automated ticketing rules, and two-way sync.