Research
Security News
Malicious npm Package Targets Solana Developers and Hijacks Funds
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
Config Clone — 🆕 Start new project with your default configs.
Clone your default configuration files to current working directory.
gem install confc
Usage: confc [options] [filenames...]
Clone your default configuration files to current working directory.
-p, --path [PATH] Path to configuration files
-f, --overwrite Force to overwrite
-y, --yes Say yes without inquiry
-v, --verbose Display more information
-V, --version Show version number
-h, --help Show help
You can configure ConfC via .confcrc
, .confcrc.json
, .confcrc.yml
or .confcrc.yaml
file.
More information about configuration file can be found from mysticonfig.
path
Type: String
Default: $HOME (Your home directory)
Path to directory that contain your default configuration files.
files
Type: Array<String>
Default: Files name in files.yaml
List of target files name that you want to clone.
If you have your own configuration files and don't want to use files from files.yaml, just replace it with your files name by this option.
overwrite
Type: Boolean
Default: false
Force to overwrite files if it exists.
verbose
Type: Boolean
Default: false
Display verbose information.
FAQs
Unknown package
We found that confc demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
Security News
Research
Socket researchers have discovered malicious npm packages targeting crypto developers, stealing credentials and wallet data using spyware delivered through typosquats of popular cryptographic libraries.
Security News
Socket's package search now displays weekly downloads for npm packages, helping developers quickly assess popularity and make more informed decisions.