
Security News
/Research
Wallet-Draining npm Package Impersonates Nodemailer to Hijack Crypto Transactions
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
A command line app that puts the opening brace for an Objective-C code block on the same line as the opening clause.
Xcode is inconsistent about the placement of braces for code that it inserts for us. Sometimes it puts the opening braces on the same line, sometimes it puts it on the next line. I prefer it to be on the opening line. This command line app makes it easy to change selected source files, or all the files in a folder, or even run with the dry-run option to see what files would be changed.
$ gem install fixbraces
Clone the repository and then build and install it:
rake install
Once it is installed, you can run it from the command line. Either pass it the current directory ('.') or a path to a directory that contains source file. Alternatively, pass it a list of files.
You can pass it a directory:
fixbraces aDirectory
or even use '.' for the current directory:
fixbraces .
Apply it ot a single file:
fixbraces aDirectory/SourceFile.m
or a number of files:
fixbraces aDirectory/*.m
If you just want to see what files would be changed, then use the --dry-run
,
or -d
option:
fixbraces -d .
Run fixbraces --help
for details.
--dry-run, -d
option to list the files that would change, but make
no actual corrections.I have tests, you can see them for yourself. The script works, but I'm aggressive about using version control, so if anything did get messed up I'm not left in an unrecoverable state.
I suggest you do the same.
git checkout -b my-new-feature
)git commit -am 'Added some feature'
)git push origin my-new-feature
)Standard MIT license. Knock yourself out.
FAQs
Unknown package
We found that fixbraces demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
/Research
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
Security News
This episode explores the hard problem of reachability analysis, from static analysis limits to handling dynamic languages and massive dependency trees.
Security News
/Research
Malicious Nx npm versions stole secrets and wallet info using AI CLI tools; Socket’s AI scanner detected the supply chain attack and flagged the malware.