Security News
Supply Chain Attack Detected in Solana's web3.js Library
A supply chain attack has been detected in versions 1.95.6 and 1.95.7 of the popular @solana/web3.js library.
clenver (Command Line home ENVironment mangER) is a Ruby gem that bootstrap and manage your shell environment.
clenver aims to shorten time of configuring your brand new Linux account to fully featured development envionment of your choice by using:
It also aims to reliably manage your exising environment by:
Simply type in you shell:
gem install clenver
clenver is able to bootstrap your brand new Linux account according to rules provided through YAML file. For
xample create dummy.yml
with below content:
https://github.com/pietrushnic/dummy.git:
links:
foobar.txt:
- foobar_link
foobar:
- foobar_dir_link
run:
- echo "success!!!"
remotes:
upstream:
- https://github.com/pietrushnic/dummy.git
After that running
clenver init dummy.yaml
gives you below tree:
dummy
├── dummy
│ ├── foobar
│ ├── foobar.txt
│ └── README.md
├── foobar_dir_link -> $PWD/dummy/dummy/foobar
└── foobar_link -> $PWD/dummy/dummy/foobar.txt
And of course will display success!!!
message. Carefully crafted YAML file can bootstrap you clean user account into fully configured user account.
FAQs
Unknown package
We found that clenver demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
A supply chain attack has been detected in versions 1.95.6 and 1.95.7 of the popular @solana/web3.js library.
Research
Security News
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
Security News
Research
Socket researchers have discovered malicious npm packages targeting crypto developers, stealing credentials and wallet data using spyware delivered through typosquats of popular cryptographic libraries.