Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
======= Fry is Louie's much more graphic-heavy, photogenic brother (still a Jekyll theme tho).
Add this line to your Jekyll site's Gemfile:
gem "fry"
And add this line to your Jekyll site's _config.yml
:
theme: fry
And then execute:
$ bundle
Or install it yourself as:
$ gem install fry
Here are a few general info fields to populate your new site right away.
title: Fry
baseurl: "/fry"
favicon: "/assets/ico.png"
g_analytics: UA-12345678-1
header: name of your site here
desc: >
description of your site, can be a quick bio if it's a portfolio. It supports HTML so add your links, imgs, whatever!
To add links to your social sites (linkedin, twitter, etc) below the bio, create a file named social.yml
in your _data
folder (which you may not have created yet). Inside it, follow the following format:
- title: Twitter
url: http://twitter.com/lllychen
- title: Github
url: http://github.com/lllychen/lou
# and so on...
The default format for dates is %Y-%m-%d
, which displays January 2nd, 2017 as 2017-01-02
. However, you can customize it according to this in _config.yml
such as follows:
date_format: "%Y-%m-%d"
This site is organized by sets of photos, which are each essentially a Jekyll post. To add a new one, create a new post and in the front matter, follow the example below:
layout: post
title: name of your project or the like
photos:
unique-id-for-your-photo: path/to or url
The unique ID for each photo will be important as it is needed for the lightbox to work properly.
FAQs
Unknown package
We found that fry demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.